duhirsch / sigspooxLinks
Spoofing signatures in Office Open XML Documents (Word, Excel, Powerpoint)
☆26Updated 2 years ago
Alternatives and similar repositories for sigspoox
Users that are interested in sigspoox are comparing it to the libraries listed below
Sorting:
- A library to parse, modify, and implement Malleable C2 profiles☆26Updated 6 years ago
- An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.☆20Updated 10 months ago
- DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)☆27Updated 5 years ago
- Small utility package for manipulating Windows process tokens☆26Updated 3 years ago
- LoadLibrary for offensive operations☆33Updated 3 years ago
- Dump Citrix Secure Access auth cookie from the process memory☆76Updated 3 years ago
- Windows x64 Process Injection via Ghostwriting with Dynamic Configuration☆29Updated 3 years ago
- Playing with PE's and Building Structures by Hand☆22Updated 3 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆91Updated 4 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- all credits go to @mgeeky☆64Updated 4 years ago
- A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM☆20Updated 3 months ago
- ☆23Updated 3 years ago
- A little implant which SSH's back with a shell☆38Updated 3 years ago
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆40Updated last year
- Load a dynamic library from memory using a fuse mount☆31Updated 2 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆63Updated 3 years ago
- LSASS enumeration like pypykatz written in C-Lang☆20Updated 3 years ago
- A small example of loading BOFs in Python with pure reflection☆19Updated 2 years ago
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆63Updated 3 years ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆31Updated 3 weeks ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆23Updated 2 years ago
- Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.☆29Updated 2 years ago
- An In-memory Embedding of CPython☆30Updated 4 years ago
- leaking net-ntlm with webdav☆26Updated 4 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Updated 4 years ago
- Shellcode Injector that obtains system call opcodes using the Halo's Gate method to evade EDR Hooks.☆19Updated 3 years ago
- Simple and sane cryptographic wrapper library.☆33Updated 2 years ago
- ADSI based SA tool☆17Updated 3 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Updated last year