sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
☆13Updated 5 years ago
Alternatives and similar repositories for weaponize_process_injection_windows_SIGSEGv2_2019:
Users that are interested in weaponize_process_injection_windows_SIGSEGv2_2019 are comparing it to the libraries listed below
- ☆17Updated 6 years ago
- module for certexfil☆15Updated 2 years ago
- C# code to run PIC using CreateThread☆17Updated 6 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Updated 3 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Updated 3 years ago
- ☆14Updated 5 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 5 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 4 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆14Updated 7 years ago
- Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2☆18Updated 4 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 5 years ago
- ☆15Updated 5 years ago
- Ransoblin (Ransomware Bokoblin)☆18Updated 4 years ago
- ☆11Updated 5 years ago
- Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical she…☆19Updated 5 years ago
- DLL hijacking vulnerability scanner and PE infector tool☆18Updated 7 years ago
- Do the unexpected with AD GPO processing☆9Updated 6 years ago
- ☆11Updated 4 years ago
- Windows privilege escalation Mafia is a framework provides all resources needed for privilege escalation beginners☆12Updated 3 years ago
- ☆28Updated 7 years ago
- Attacking and defending web and VPN session hijacking in Pulse Secure Connect☆14Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- ☆17Updated 4 years ago
- ADD/SUB encoder for alphanumeric shellcode☆9Updated 5 years ago
- Create COM Objects backed by Scripts, not DLLs☆9Updated 7 years ago
- ☆15Updated last year
- Silent Cleanup UAC Bypass POC☆11Updated 5 years ago
- Miscellaneous examples for use with Cobalt Strike Beacon☆10Updated 4 years ago
- Showing how proof-of-work can be used to evade antivirus emulators.☆11Updated 5 months ago
- Modifies machine.config for persistence after installing signed .net assembly onto GAC☆13Updated 3 years ago