SecTheBit / MalDevelopment
All my POC related to malware development
☆11Updated 10 months ago
Alternatives and similar repositories for MalDevelopment:
Users that are interested in MalDevelopment are comparing it to the libraries listed below
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆25Updated 2 years ago
- ☆47Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆30Updated last year
- .NET port of Leron Gray's azbelt tool.☆26Updated last year
- ☆17Updated 3 months ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 6 months ago
- Items related to the RedELK workshop given at security conferences☆28Updated last year
- ☆48Updated last year
- A small Aggressor script to help Red Teams identify foreign processes on a host machine☆84Updated 2 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- Create PDFs with HTML smuggling attachments that save on opening the document.☆29Updated last year
- ☆25Updated 3 years ago
- Example of using Sleep to create better named pipes.☆41Updated last year
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆29Updated 6 months ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆33Updated last year
- PowerShell Implementation of ADFSDump to assist with GoldenSAML☆31Updated 10 months ago
- in-process powershell runner for BRC4☆45Updated last year
- A simple rpc2socks alternative in pure Go.☆28Updated 8 months ago
- Extension functionality for the NightHawk operator client☆27Updated last year
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33Updated 10 months ago
- DFSCoerce exe revisited version with custom authentication☆38Updated last year
- BOF for C2 framework☆40Updated 4 months ago
- Rewrite to fit my needs☆27Updated 8 months ago
- This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…☆16Updated 5 months ago
- Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged p…☆49Updated 2 years ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆21Updated 3 years ago
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- ☆19Updated last year
- ☆20Updated last year
- SAM Dumping in C#☆44Updated 2 months ago