antirookit Goto Github PK

tetanus

Mythic C2 agent targeting Linux and Windows hosts written in Rust

the-poor-mans-obfuscator

Binary & scripts associated with "The Poor Man's Obfuscator" presentation

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

ticktock

titan

Titan: A generic user defined reflective DLL for Cobalt Strike

titanldr

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

tokenuniverse

An advanced tool for working with access tokens and Windows security policy.

traitor

:arrow_up: :skull_and_crossbones: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

unhook-bof

Remove API hooks from a Beacon process.

unredacter

Never ever ever use pixelation as a redaction technique

vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

vba2clr

Running .NET from VBA

venom

Venom is a library that meant to perform evasive communication using stolen browser socket

volumiser

vt-driver

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

vulnerability-research

vx-api

Collection of various malicious functionality to aid in malware development

wambam

Tooling related to the WAM Bam - Recovering Web Tokens From Office blog post

warfox-c2

An HTTPS beaconing Windows implant and multi-layered proxy C2 network designed for covert APT emulation focused offensive operations

webview2-cookie-stealer

what-the-f

This repo hosts a poc of how to execute F# code within an unmanaged process

windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.

windows-driver-samples

This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

windows-internals

Important notes and topics on my journey towards mastering Windows Internals

windowsinternals

Windows Internals Book 7th edition Tools

winpwn

Automation for internal Windows Penetrationtest / AD-Security

wireguard

wjcryptlib

Public Domain C Library of Cryptographic functions. Including: MD5, SHA1, SHA256, SHA512, RC4, AES, AES-CTR, AES-OFB, AES-CBC

wonkavision