y00ga-sec / Forensike

Related projects ⓘ

Alternatives and complementary repositories for Forensike

• snovvcrash / RemoteRegSave
  A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host
  ☆38Updated 11 months ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆19Updated 5 months ago
• mdsecactivebreach / PleasantTools
  Tools for Attacking Pleasant Password Server
  ☆21Updated last year
• OtterHacker / Cerbere
  ☆46Updated last year
• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆31Updated 7 months ago
• Wh04m1001 / PICDumper
  ☆24Updated 2 years ago
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆23Updated last year
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆34Updated last year
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• Wh04m1001 / ZoneAlarmEoP
  Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV
  ☆26Updated 2 years ago
• Und3rf10w / CobaltStrikeBOFs
  Beacon Object Files used for Cobalt Strike
  ☆17Updated last year
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 6 months ago
• HulkOperator / AuthStager
  ☆37Updated 3 weeks ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆36Updated 10 months ago
• Faran-17 / EarlyBird-APC-Injection
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆30Updated last year
• rasta-mouse / KerbApp
  ☆28Updated 5 months ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆51Updated last year
• hackerhouse-opensource / Gigabyte_ElevatePersist
  Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…
  ☆30Updated last year
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated last year
• Cerbersec / pyMetaTwin
  Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform
  ☆15Updated 7 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• d3lb3 / KeePass-the-Hash
  A script that greps composite key-like strings from a KeePassXC process dump, then uses a customized version of pykeepass library to unlo…
  ☆30Updated 2 years ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆39Updated 2 months ago
• atabetnouhaila / API-hashing
  ☆18Updated last month
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆24Updated 4 months ago
• patrickhener / invictus
  OSED Practice binary
  ☆24Updated 11 months ago
• dxxzero / rusty_drivers
  BYOVD collection
  ☆20Updated 8 months ago
• deepinstinct / VSTO-POC
  A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously
  ☆28Updated last year
• Wh04m1001 / RazerEoP
  ☆24Updated last year