7a6570 Goto Github PK

7a6570.github.io

aceldr

Cobalt Strike UDRL for memory scanner evasion.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

advobfuscator

Obfuscation library based on C++11/14 and metaprogramming

al-khaser

Al-khaser is a PoC malware with good intentions that aimes to stress your malware analysis / sandbox environement

amber

Reflective PE packer.

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

antivmdetection

Script to create templates to use with VirtualBox to make vm detection harder

apiscout

This project aims at simplifying Windows API import recovery on arbitrary memory dumps

beacon

Former attempt at creating a independent Cobalt Strike Beacon

binjection

Injects additional machine instructions into various binary formats.

blobrunner

Quickly debug shellcode extracted during malware analysis

bo2k

Archive of BO2K_1_1_6 filez + src

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

bruteratel-detectiontools

A collection of Tools and Rules for decoding Brute Ratel C4 badgers

challenges

Collection of solved challenges

compilerbook-examples

Example code for compilers textbook.

course-compiler-construction

Compiler Construction MSc course lecture material

cyberchef-recipes

A list of cyber-chef recipes and curated links

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dlloader

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

findyara-ida

IDA python plugin to scan binary with Yara rules

flare-vm

grap

grap: define and match graph patterns within binaries

hunt-sleeping-beacons

Aims to identify sleeping beacons

immersive-labs-volatility_plugins

Volatility 3 Plugins

inject-assembly

Inject .NET assemblies into an existing process

invoke-obfuscation

PowerShell Obfuscator