porlacola25 Goto Github PK

directinjectorpoc

Small POC written in C# that performs shellcode injection on x64 processes using direct syscalls as a way to bypass user-land EDR hooks.

ntcreateuserprocess

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

ppid-spoofing

POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritting ntdll:LdrInitializeThunk with shellcode.

processdoppelganging

Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.

recaptcha-bypass

PoC python selenium script to solve reCAPTCHA challenges using speech recognition.

sandbox

sparty

Sparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]

test

transactedsharpminidump

Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS using sockets.

vba-tests