lem0nSec / SkeletonKey
Reproducing the SkeletonKey malware.
☆11Updated 7 months ago
Related projects ⓘ
Alternatives and complementary repositories for SkeletonKey
- Offensive Assembly code snippets.☆10Updated last year
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆32Updated 2 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆32Updated last year
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆21Updated last year
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆17Updated last year
- Extension functionality for the NightHawk operator client☆26Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- ☆22Updated 6 months ago
- HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation☆15Updated 4 months ago
- RunPE adapted for x64 and written in C, does not use RWX☆24Updated 6 months ago
- ☆34Updated last year
- A way to extract tickets in case I need to purge and restore tickets on the fly.☆17Updated 7 months ago
- BOF for C2 framework☆40Updated 2 weeks ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Updated 3 years ago
- C# API for Nidhogg rootkit☆16Updated 6 months ago
- ☆19Updated 5 months ago
- Exploiting the KsecDD Windows driver through Server Silos☆24Updated last week
- Tool to aid in dumping LSASS process remotely☆17Updated 3 months ago
- convert compatible dlls to shellcode with sRDI. I don't remember where this came from, so if you recognize the code, let me know and I'll…☆12Updated 7 months ago
- API Hammering with C++20☆34Updated 2 years ago
- string encryption in Nim☆17Updated 5 months ago
- Just another Process Injection using Process Hollowing technique.☆16Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆36Updated 3 months ago
- ☆18Updated last month
- idk man this was the default github name☆35Updated last year
- powershell script i wrote that can suspend an arbitrary process (with limits)☆20Updated last year
- ☆12Updated last year
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆39Updated 11 months ago