pathtofile / commandline_cloaking
A collection of projects demonstrating various commandline cloaking techniques on Linux
☆53Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for commandline_cloaking
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆50Updated 2 years ago
- Mara is a userland pty/tty sniffer☆52Updated 11 months ago
- kubernetes rootkit☆28Updated 11 months ago
- A library to parse, modify, and implement Malleable C2 profiles☆21Updated 5 years ago
- Binary to shellcode from an object/executable format 32 & 64-bit PE , ELF☆71Updated 3 years ago
- all credits go to @mgeeky☆58Updated 3 years ago
- bdvl☆109Updated 2 years ago
- PoC for CVE-2021-4034 dubbed pwnkit☆33Updated 2 years ago
- Utility to inject honey tokens into lsass.☆27Updated 7 years ago
- Zoom Persistence Aggressor and Handler☆53Updated 3 years ago
- Ingest openldap data into bloodhound☆78Updated 3 years ago
- Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.☆29Updated last year
- various slides and presentations I've worked on☆18Updated 9 months ago
- Just another useless C2 occupying space in some HDD somewhere.☆19Updated last year
- Sukoshi is a proof-of-concept Python/C++ implant that leverages the MQTT protocol for C2 and uses AWS IoT Core as infrastructure.☆44Updated 2 years ago
- A local LKM rootkit loader/dropper that lists available security mechanisms☆52Updated 3 years ago
- Continuous kerberoast monitor☆44Updated last year
- Reproducible and extensible BloodHound playbooks☆42Updated 4 years ago
- A little implant which SSH's back with a shell☆36Updated 2 years ago
- ☆23Updated 2 years ago
- MacOS C2 Framework☆82Updated 3 years ago
- The God Name Server☆29Updated 2 months ago
- Data exfiltration and covert communication tool☆37Updated last year
- Playing with PE's and Building Structures by Hand☆22Updated 2 years ago
- Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.☆59Updated last year
- GoLang binary pclntab mangler☆14Updated 4 years ago
- ☆56Updated 3 years ago
- Sandfly Linux Stealth Rootkit Decloaking Utility☆92Updated last year