MrEmpy / Reaper

Related projects: ⓘ

• cybersectroll / TrollAMSI
  ☆131Updated 3 months ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆164Updated 8 months ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆171Updated 7 months ago
• 0xsp-SRD / MDE_Enum
  comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…
  ☆193Updated 3 months ago
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆142Updated 3 months ago
• SaadAhla / AMSI_patch
  Patching AmsiOpenSession by forcing an error branching
  ☆141Updated last year
• ZERODETECTION / MSC_Dropper
  ☆119Updated last month
• oh-az / NoArgs
  NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…
  ☆144Updated 4 months ago
• Diverto / IPPrintC2
  PoC for using MS Windows printers for persistence / command and control via Internet Printing
  ☆139Updated 4 months ago
• WKL-Sec / GregsBestFriend
  GregsBestFriend process injection code created from the White Knight Labs Offensive Development course
  ☆171Updated last year
• MzHmO / NtlmThief
  Extracting NetNTLM without touching lsass.exe
  ☆223Updated 9 months ago
• nettitude / Tartarus-TpAllocInject
  ☆172Updated 9 months ago
• TunnelGRE / Percino
  Evasive Golang Loader
  ☆129Updated last month
• gatariee / Winton
  Command and Control (C2) framework
  ☆122Updated 5 months ago
• souzomain / Shaco
  Shaco is a linux agent for havoc
  ☆137Updated 10 months ago
• Mr-Un1k0d3r / AMSI-ETW-Patch
  Patch AMSI and ETW
  ☆227Updated 4 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare.
  ☆76Updated 4 months ago
• lsecqt / ThreadlessInject-C-Implementation
  This repository implements Threadless Injection in C
  ☆150Updated 8 months ago
• Hacker-Hermanos / C2_INFRA_WORKSHOP_DEFCON32_RED_TEAM_VILLAGE
  C2 Infrastructure Automation
  ☆82Updated last month
• cpu0x00 / SharpReflectivePEInjection
  reflectively load and execute PEs locally and remotely bypassing EDR hooks
  ☆151Updated 8 months ago
• OtterHacker / SetProcessInjection
  ☆142Updated 11 months ago
• zyn3rgy / smbtakeover
  BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions
  ☆242Updated last month
• icyguider / LatLoader
  PoC module to demonstrate automated lateral movement with the Havoc C2 framework.
  ☆266Updated 9 months ago
• Ghost53574 / havoc_profile_generator
  Havoc C2 profile generator
  ☆55Updated this week
• NUL0x4C / NoRunPI
  Run Your Payload Without Running Your Payload
  ☆174Updated last year
• MzHmO / TGSThief
  My implementation of the GIUDA project in C++
  ☆152Updated last year
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated 9 months ago
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆114Updated 2 months ago
• Tylous / Freeze
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆87Updated last year
• mandiant / ccmpwn
  ☆174Updated 5 months ago