gh057pr1nc3 Goto Github PK

go_bypass

Golang Bypass Av Generator template

hardentools

Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.

heroinn

A cross platform C2/post-exploitation framework.

hide-and-seek

PoC for hiding processes from Windows Task Manager by manipulating the graphic interface

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

injectallthethings

Seven different DLL injection techniques in one single project.

injection

injection-1

Windows process injection methods

injectproc

InjectProc - Process Injection Techniques [This project is not maintained anymore]

installerfiletakeover

invoke-detectiteasy

Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.

invoke-obfuscation

PowerShell Obfuscator

invoke-printdemon

invoke-thehash

PowerShell Pass The Hash Utils

kansa

A Powershell incident response framework

kernelbypasssharp

C# Kernel Mode Driver to read and write memory in protected processes

linux-inject

Tool for injecting a shared object into a Linux process

magiskonwsa

Integrate Magisk root and Google Apps (OpenGApps) into WSA (Windows Subsystem for Android)

mal_unpack

Dynamic unpacker based on PE-sieve

malware-gems

A not so awesome list of malware gems for aspiring malware analysts

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

masqueradingpeb

Maquerade any legitimate Windows binary by changing some fields in the PEB structure

misc-powershell-scripts

Random Tools

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nlscodeinjectionthroughregistry

Dll injection through code page id modification in registry. Based on jonas lykk research

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

oleviewdotnet

A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container