StrangerealIntel / Cerberus
Sources code extracted from malwares for analysis
☆36Updated last year
Related projects: ⓘ
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆74Updated 4 years ago
- ☆23Updated 4 years ago
- A collection of Malleable C2 profiles that work with Cobalt Strike 3.x.☆28Updated 5 years ago
- ☆15Updated 3 years ago
- AMSI detection PoC☆30Updated 4 years ago
- Experiments on the Windows Internals☆30Updated 4 years ago
- Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…☆19Updated 3 years ago
- The source code of the SLAE assignments documented at https://rastating.github.io/☆23Updated 5 years ago
- ☆21Updated this week
- (Sim)ulate (Ba)zar Loader☆29Updated 3 years ago
- adding a backdooruser using win32api☆79Updated 4 years ago
- Sound Research SECOMN service Privilege Escalation (windows 10)☆39Updated 4 years ago
- Simple skeleton for a CPP DLL☆22Updated 4 years ago
- I used this to see if an EDR is running in Safe Mode☆34Updated 3 years ago
- Data from analysis of the custom sample from the chapter "Practical Analysis and Test"☆12Updated 4 years ago
- Just another useless C2 occupying space in some HDD somewhere.☆19Updated last year
- PoC for CVE-2020-1015☆39Updated 4 years ago
- File Write Weapon for Privilege Escalation To get SYSTEM☆17Updated 4 years ago
- A small utility to deal with malware embedded hashes.☆48Updated 11 months ago
- C++ POC code for the wlbsctrl.dll hijack on IKEEXT☆52Updated 5 years ago
- Simplified version of Forshaw's Diaghub Collector Exploit☆30Updated 5 years ago
- CVE-2020-1048 bypass: binary planting PoC☆32Updated 4 years ago
- CVE-2020-8950 AMD User Experience Program Launcher from Radeon Software Privilege Escalation ( FileWrite eop)☆28Updated 4 years ago
- ☆21Updated this week
- SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner☆46Updated 4 years ago
- Spin up a reverse proxy quickly on Heroku☆13Updated 3 years ago
- POC code to crash Windows Event Logger Service☆25Updated 3 years ago
- DLL hijacking vulnerability scanner and PE infector tool☆16Updated 7 years ago
- QuasarRAT analysis tools and research report☆24Updated 8 months ago
- A script that can be deployed to Azure App for C2 / Proxy / Redirector☆35Updated 5 years ago