volexity / donut-decryptorLinks
Retrieve inner payloads from Donut samples
☆104Updated last year
Alternatives and similar repositories for donut-decryptor
Users that are interested in donut-decryptor are comparing it to the libraries listed below
Sorting:
- Windows Persistence IT-Security☆103Updated 4 months ago
- ☆118Updated last year
- Local & remote Windows DLL Proxying☆165Updated last year
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆140Updated last year
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated 4 months ago
- This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared☆89Updated last year
- ☆155Updated 7 months ago
- .NET tool used to enrich RPC telemetry☆95Updated last month
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆103Updated last year
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆149Updated last week
- Finding secrets in kernel and user memory☆116Updated last year
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆206Updated 7 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆147Updated last year
- Identifies bad bytes from static analysis with any Anti-Virus scanner.☆125Updated last year
- ☆86Updated 2 years ago
- ☆107Updated 9 months ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆99Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆189Updated 8 months ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆134Updated this week
- Blog/Journal on how to backdoor VSCode extensions☆63Updated 2 weeks ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆120Updated last year
- A small How-To on creating your own weaponized WSL file☆83Updated 2 weeks ago
- Tools for analyzing EDR agents☆238Updated last year
- Detect EDR's exceptions by inspecting processes' loaded modules☆130Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- Command and Control (C2) framework☆128Updated 2 months ago
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆132Updated last year
- A Mythic Agent written in PIC C.☆196Updated 6 months ago
- Detect WFP filters blocking EDR communications☆93Updated last year
- ☆188Updated last year