MEhrn00 / GhidraCOFFParser
Ghidra script which fully parses COFF files
☆12Updated 6 months ago
Alternatives and similar repositories for GhidraCOFFParser:
Users that are interested in GhidraCOFFParser are comparing it to the libraries listed below
- Showing how proof-of-work can be used to evade antivirus emulators.☆11Updated 5 months ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆17Updated last year
- ☆24Updated last week
- ☆15Updated last year
- DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)☆27Updated 5 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Updated 3 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Updated 3 years ago
- A lexer and parser for Sleep☆19Updated 3 months ago
- ☆12Updated last year
- Some stuff for PHD2021☆14Updated 3 years ago
- An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.☆18Updated 4 months ago
- ☆24Updated 3 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆15Updated 3 years ago
- ☆11Updated 5 years ago
- ☆19Updated 4 years ago
- ☆18Updated last year
- ☆18Updated 4 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆34Updated 3 years ago
- OpenHashAPI provides a secure method of communicating hashes and enables lightweight workflows for security practitioners and enthusiasts…☆14Updated 6 months ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆18Updated 2 years ago
- A C# port of https://gist.github.com/adamsvoboda/8f29e09d74b73e1dec3f9049c4358e80☆20Updated 3 weeks ago
- Miscellaneous examples for use with Cobalt Strike Beacon☆10Updated 4 years ago
- ☆14Updated 3 years ago
- C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly☆16Updated 3 years ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆14Updated 2 years ago
- kernel-mode DLL Injector☆18Updated last week
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆15Updated 3 years ago
- A custom SentinelOne USB scanner.☆18Updated 3 years ago
- Python C2 with JScript Implant☆14Updated last year
- Strstr with user-supplied needle and filename as a BOF.☆32Updated 3 years ago