3lp4tr0n Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

alaris

A protective and Low Level Shellcode Loader the defeats modern EDR systems.

beaconhunter

Detect and respond to Cobalt Strike beacons using ETW.

blocketw

.Net Assembly to block ETW telemetry in current process

cheeseounce

Coerce Windows machines auth via MS-EVEN

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

cve-2021-40444

CVE-2021-40444 PoC

cve-2023-27470_exercise

dazzleup

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.

dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

dynamicwrapperdotnet

Dynamically Loads Assembly and Calls Methods from JScript

evtmute

Apply a filter to the events being reported by windows event logging

expbox

Vulnerability Exploitation Code Collection Repository

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

godpotato

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

jenkins-decrypt

Credentials dumper for Jenkins

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mimikore

.NET 5 Single file Application

msi-search

ninja_uuid_runner

Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

officepurge

pluto

A manual system call library that supports functions from both ntdll.dll and win32u.dll

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

ppldump_bof

A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.

printnightmare

processhollowing

route-sixty-sink

Link sources to sinks in C# applications.