djhohnstein Goto Github PK

cnvd-c-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

coffloader

coredns

CoreDNS is a DNS server that chains plugins

corporate_masks

8-14 character Hashcat masks based on analysis of 1.5 million NTLM hashes cracked while pentesting

cplresourcerunner

Run shellcode from resource

cppwebclient

Web client to wrap GET and POST requests in C++

cpp_vs_payload_template

Visual Studio (C++) Solution Template for Payloads

creadmemory

Read Memory without ReadProcessMemory for Current Process

credking

Password spraying using AWS Lambda for IP rotation

csharpcreatethreadexample

C# code to run PIC using CreateThread

csharpsetthreadcontext

C# Shellcode Runner to execute shellcode via CreateRemoteThread and SetThreadContext to evade Get-InjectedThread

ctftool

Interactive CTF Exploration Tool

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

dcvc2

A Golang Discord C2 unlike any other. DCVC2 uses RTP packets over a voice channel to transmit all data leaving no operational traces in text chats.

deepsea

DeepSea Phishing Gear

derbycon2019

Code & Slides For DerbyCon 2019

dotnettojscript-languagemodebreakout

dotnettracer

C code to enable ETW tracing for Dotnet Assemblies

ekko

Sleep Obfuscation

essdp_fork

Fork of Evil SSDP from InitString. Adds base64 authentication, redirect urls and customizable realm options for internal phishing.

etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

etwti-syscall-hook

A simple program to hook the current process to identify the manual syscall executions on windows

eventlogparser

Parse PowerShell and Security event logs for sensitive information.

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evilrdp

filelessntdllreflection

Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll, and trigger exported API from the export table

filelessremoteshellcode

Run Fileless Remote Shellcode directly in memory with Module Unhooking , Module Stomping, No New Thread. This repository contains the TeamServer and the Stager

flyingafalseflag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

foliage

Public variation of FOLIAGE ( original developer )

foolavc

foolav successor - loads DLL, executable or shellcode into memory and runs it effectively bypassing AV