raitomx Goto Github PK

2022-04-02-malware-injection-18

Find kernel32 base and API addresses. Simple C++ implementation

2022-06-05-malware-av-evasion-7

Malware AV evasion via disable Windows Defender (Registry). C++

2022-09-06-malware-tricks-23

Malware dev tricks: parent PID spoofing. C++ implementation

887rat

887+1 Rat, fully cracked with all 3 working builders

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

aggrokatz

Aggrokatz is an aggressor plugin extension for Cobalt Strike which enables pypykatz to interface with the beacons remotely and allows it to parse LSASS dump files and registry hive files to extract credentials and other secrets stored without downloading the file and without uploading any suspicious code to the beacon.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alanframework

A C2 post-exploitation framework

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi-go

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

amsitrigger

The Hunt for Malicious Strings

annoy-the-script-kiddie

Collection of scripts and other content to make the life of bots and script-kiddies as hard as possible

antnium

apt-lab-terraform

Purple Teaming Attack & Hunt Lab - Terraform

aspia

Remote desktop and file transfer tool.

atomic-red-team-intelligence-c2

ARTi-C2 is a post-exploitation framework used to execute Atomic Red Team test cases with rapid payload deployment and execution capabilities via .NET's DLR.

attack-stix-data

STIX data representing MITRE ATT&CK

attack_data

A repository of curated datasets from various attacks

auditpolcis

CIS Benchmark testing of Windows SIEM configuration

avcleaner

C/C++ source obfuscator for antivirus bypass

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

awesome-ida-x64-olly-plugin

A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

awesome-intelligence-writing

Awesome collection of great and useful resources concerning intelligence writing such as manuals/guides, standards, books, and articles

awesome-soc

A collection of sources of documentation, as well as field best practices, to build/run a SOC

awesome_incident_response

Awesome Incident Response

awesome_malware_techniques

This is a repository of resource about Malware techniques

azure-ad-incident-response-powershell-module

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in conjunction with the Microsoft Detection and Response Team (DART), to assist in compromise response.

backstab

A tool to kill antimalware protected processes