y00ga-sec / Forensike

Related projects: ⓘ

• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆30Updated 5 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆29Updated 10 months ago
• Wh04m1001 / PICDumper
  ☆24Updated 2 years ago
• EspressoCake / ReadRemoteProcessCommandline_BOF
  ☆23Updated 4 months ago
• attl4s / freeMetsrvLoader
  freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package
  ☆33Updated last year
• snovvcrash / RemoteRegSave
  A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host
  ☆37Updated 9 months ago
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆29Updated last month
• jsecu / ElevatedEvents
  ☆29Updated last year
• Cerbersec / pyMetaTwin
  Copy metadata and digital signatures information from one Windows executable to another using Wine on a non-Windows platform
  ☆15Updated 5 months ago
• mdsecactivebreach / PleasantTools
  Tools for Attacking Pleasant Password Server
  ☆21Updated last year
• Wh04m1001 / ZoneAlarmEoP
  Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV
  ☆26Updated last year
• realoriginal / krbtgs
  old postex for grabbing a krbtgs for my current user
  ☆28Updated last year
• CodeXTF2 / evasion-adventures-files
  Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"
  ☆22Updated last year
• chebuya / Havoc-C2-SSRF-poc
  CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit
  ☆34Updated last week
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆50Updated last year
• CUHKJason / BOF-klist
  A simple BOF implementation of klist using Windows API
  ☆30Updated 2 years ago
• c3r3br4t3 / ShadowRDP
  ☆56Updated 7 months ago
• decoder-it / DFSCoerce-exe-2
  DFSCoerce exe revisited version with custom authentication
  ☆34Updated 8 months ago
• Faran-17 / EarlyBird-APC-Injection
  Demonstration of Early Bird APC Injection - MITRE ID T1055.004
  ☆30Updated 10 months ago
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆20Updated 3 months ago
• purplededa / CVE-2022-44721-CsFalconUninstaller
  ☆25Updated this week
• hackerhouse-opensource / Gigabyte_ElevatePersist
  Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…
  ☆30Updated last year
• ZephrFish / ADFSDump-PS
  PowerShell Implementation of ADFSDump to assist with GoldenSAML
  ☆31Updated 4 months ago
• KingOfTheNOPs / EnableWebDAVClient-BOF
  Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts
  ☆17Updated last year
• D1rkMtr / ADSrunner
  ☆22Updated this week
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆23Updated 2 months ago
• MrAle98 / psinline
  in-process powershell runner for BRC4
  ☆35Updated 10 months ago
• redskal / SharpAzbelt
  .NET port of Leron Gray's azbelt tool.
  ☆26Updated 11 months ago
• Mr-Un1k0d3r / BOFCode
  Bunch of BOF files
  ☆21Updated 7 months ago
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆36Updated 8 months ago