antirookit Goto Github PK

sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

sharpwsus

sharpzippo

List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly

shellby

Small handy tool for crafting shellcodes by hand.

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

shellcodeframework

绕3环的shellcode免杀框架

shellcodetemplate

A easily modifiable shellcode template for Windows x64/x86

shellvm

A collection of LLVM transform and analysis passes to write shellcode in regular C

shhhloader

SysWhispers Shellcode Loader (Work in Progress)

shortpayload

如何将Java反序列化Payload极致缩小

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

sleepycrypt

A shellcode function to encrypt a running process image when sleeping.

sliver

Adversary Emulation Framework

smb-session-spoofing

snd_amsi

Start new PowerShell without etw and amsi in pure nim

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spartacus

Spartacus DLL Hijacking Discovery Tool

spring-rce-poc

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

squarephish

ssn_resolver

dynamically resolving System Service Number (syscall number) by offsets from the PEB with API hashing

stealth_shellcode_runners

suborner

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

syscallslib

a library that automates some clean syscalls to make it easier to implement

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

t.d.p

Using Thread Description To Hide Shellcode

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts