RedSiege / Chromatophore
Utilities for obfuscating shellcode
☆51Updated 7 months ago
Alternatives and similar repositories for Chromatophore:
Users that are interested in Chromatophore are comparing it to the libraries listed below
- Lifetime AMSI bypass.☆35Updated 7 months ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆83Updated 7 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 7 months ago
- ☆58Updated last year
- Determine if the WebClient Service (WebDAV) is running on a remote system☆18Updated 11 months ago
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆51Updated 9 months ago
- Sniffing files generator☆52Updated 3 months ago
- Slide decks and/or materials from conference presentations☆55Updated 2 years ago
- Small project to facilitate creation of .lnk payloads☆63Updated 2 years ago
- Living Off the Foreign Land setup scripts☆64Updated last month
- ☆107Updated 2 months ago
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆68Updated 5 months ago
- Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation☆30Updated 2 years ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆109Updated 9 months ago
- A Python POC for CRED1 over SOCKS5☆139Updated 4 months ago
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆78Updated 2 years ago
- ☆47Updated last year
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆89Updated last year
- Just another ntdll unhooking using Parun's Fart technique☆73Updated 2 years ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆115Updated 8 months ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆80Updated 4 months ago
- malleable profile generator GUI for Havoc☆56Updated last year
- D/Invoke standalone shellcode runners☆37Updated last year
- A tool for carrying out brute force attacks against Office 365, with built in IP rotation use AWS gateways.☆74Updated 8 months ago
- Windows Thread Pool Injection Havoc Implementation☆28Updated 10 months ago
- Leveraging AWS Lambda Function URLs for C2 Redirection☆26Updated last year
- Deploy a phishing infrastructure on the fly.☆68Updated last month
- Python module for running BOFs☆68Updated last year