gerbsec / SmokeyObfuscator

Related projects: ⓘ

• EvilGreys / XLL-DROPPER-
  ☆28Updated this week
• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆34Updated 9 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 2 months ago
• weaselsec / ClickOnce-AppDomain-Manager-Injection
  Click Once + App Domain
  ☆61Updated 9 months ago
• fern89 / ghostwriting-2
  A process injection technique using only thread context manipulation
  ☆21Updated 9 months ago
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆32Updated 8 months ago
• rasta-mouse / KerbApp
  ☆27Updated 3 months ago
• OffenseTeacher / Steganim
  ☆47Updated last year
• NVISOsecurity / cs2br-bof
  ☆54Updated last month
• jsecu / BOF-pack-1
  A care package of useful bofs for red team engagments
  ☆47Updated last year
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated last month
• fin3ss3g0d / IoDllProxyLoad
  DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly
  ☆50Updated 6 months ago
• Bl4ckM1rror / PEAs
  ☆57Updated 9 months ago
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆85Updated 7 months ago
• Hackcraft-Labs / SharpShares
  Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain
  ☆32Updated 10 months ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆28Updated last year
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆29Updated 10 months ago
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• antroguy / LocklessBof
  Lockless BOF
  ☆62Updated 7 months ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆35Updated 10 months ago
• Leo4j / KeyCredentialLink
  Add Shadow Credentials to a target object by editing their msDS-KeyCredentialLink attribute
  ☆19Updated 3 months ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated last year
• Allevon412 / SyscallTempering
  ☆25Updated last month
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• wsummerhill / DictionShellcode
  Encode shellcode into dictionary words for evasion and entropy reduction
  ☆13Updated 2 months ago
• nickvourd / GetWebDAVStatus
  Determine if the WebClient Service (WebDAV) is running on a remote system
  ☆15Updated 6 months ago
• eversinc33 / SharpStartWebclient
  Programmatically start WebClient from an unprivileged session to enable that juicy privesc.
  ☆60Updated last year
• ChoiSG / SharpPSLoader
  Simple .NET loader for loading and executing Powershell payloads
  ☆13Updated 2 years ago
• whokilleddb / SOAPHound
  SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…
  ☆32Updated 3 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆74Updated 3 months ago