antirookit Goto Github PK

coeus

ADSI based SA tool

com-hunter

COM Hijacking VOODOO

conti-leaks-englished

Google and deepl translated conti leaks, which is shared by a member of the conti ransomware group.

cornershot

Amplify network visibility from multiple POV of other hosts

createprocess

A small PoC that creates processes in Windows

creds

Some usefull Scripts and Executables for Pentest & Forensics

cronos

PoC for a new sleep obfuscation technique leveraging waitable timers to evade memory scanners.

crossc2

generate CobaltStrike's cross-platform payload

cs-tools

cobalt strike tools

cs_decrypt

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2022-2639-pipeversion

CVE-2022-2639 Linux kernel openvswitch local privilege escalation

cve-2022-41352-zimbra-rce

Zimbra <9.0.0.p27 RCE

cve-2022-42045

darkfinger-c2

Windows TCPIP Finger Command / C2 Channel and Bypassing Security Software

darkloadlibrary

LoadLibrary for offensive operations

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

deepsleep

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

delegationbof

detection-rules

Rules for Elastic Security's detection engine

detectwindowscopyonwriteforapi

Enumerate various traits from Windows processes as an aid to threat hunting

dfscoerce

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

dissect.cobaltstrike

Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

doge-dumpmem

dump lsass

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

doge-memldr

memory dll loader