sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
☆13Updated 5 years ago
Alternatives and similar repositories for weaponize_process_injection_windows_SIGSEGv2_2019:
Users that are interested in weaponize_process_injection_windows_SIGSEGv2_2019 are comparing it to the libraries listed below
- ☆14Updated 5 years ago
- module for certexfil☆15Updated 2 years ago
- C# code to run PIC using CreateThread☆17Updated 5 years ago
- ☆16Updated 6 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 4 years ago
- DLL hijacking vulnerability scanner and PE infector tool☆18Updated 7 years ago
- A PoC to show how to add code to C# and dotNet and make it reusable for Red Team operations. Maybe one day it will be the largest collect…☆17Updated 4 years ago
- PoC code from blog☆16Updated 5 years ago
- A PowerShell script to prevent Sysmon from writing its events☆15Updated 4 years ago
- SSDP Service Discovery☆16Updated 6 years ago
- Attacking and defending web and VPN session hijacking in Pulse Secure Connect☆14Updated 5 years ago
- ☆14Updated 5 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- ☆15Updated 4 years ago
- ADD/SUB encoder for alphanumeric shellcode☆9Updated 5 years ago
- ☆11Updated 6 years ago
- Retrieve the IIS Application Pool Credentials. Relies on the WebAdministration PowerShell Module.☆14Updated 7 years ago
- ☆28Updated 7 years ago
- Techniques that i have used to evade anti-virus during pen tests.☆13Updated 6 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Updated 3 years ago
- ☆10Updated 7 years ago
- Ransoblin (Ransomware Bokoblin)☆18Updated 4 years ago
- Dump Lsass Memory Using a Reflective Dll☆14Updated 3 years ago
- This repo contains code of JScript .NET which can be used as alternative to csc.exe to run potentially malicious code, which ships in all…☆12Updated 5 years ago
- Create COM Objects backed by Scripts, not DLLs☆9Updated 7 years ago
- Code for blog written at 0xdarkvortex.dev Red Team TTPs Part 2☆18Updated 4 years ago
- A tool to sync mythic events with ghostwriter oplog.☆12Updated 4 months ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆12Updated last year
- Identify common attack paths to get Domain Administrator☆22Updated 5 years ago
- RID Hijacking Proof of Concept script by Kevin Joyce☆15Updated 6 years ago