antirookit Goto Github PK

negoexrelay

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

netcoreserver

Ultra fast and low latency asynchronous socket server & client C# .NET Core library with support TCP, SSL, UDP, HTTP, HTTPS, WebSocket protocols and 10K connections problem solution

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nimalathatep

Nim Payload Generation

nimc2

a c2 fully written in nim

nimlinewhispers3

A tool for converting SysWhispers3 syscalls for use with Nim projects

ninjasploit

A meterpreter extension for applying hooks to avoid windows defender memory scans

norunpi

Run Your Payload Without Running Your Payload

notes

Resources and articles I need to take a look at. Mostly about malware/exploit development and analysis.

ntcreateuserprocess

Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html

o365spray

Username enumeration and password spraying tool aimed at Microsoft O365.

obfloader

MAC, IPv4, UUID shellcode Loaders and Obfuscators to obfuscate the shellcode and using some native API to converts it to it binary format and loads it.

obfuscator

ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,10.x,11.x,12.x,13.x,swift-llvm-clang 5.0(waiting support swift obfuscator),swift-llvm-clang 5.5(bcf disable)

offensive_tools

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensivenotion

Notion as a platform for offensive operations

offensiverust

Rust Weaponization for Red Team Engagements.

orpheus

Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types

othread

an obfuscator based on LLVM which can obfuscate the program execution trajectory

oxid-find

Find the host network card address through OXID Resolver

pandora-hvnc-hidden-browser-real-vnc-working-chromium-edge-opera-gx

Hidden Features Full Hidden Access Hidden Desktop Hidden Browsers Hidden Cmd Clone Profile Hidden PowerShell Hidden Explorer Hidden Startup Hidden Applications

passthecert

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

pcileech

Direct Memory Access (DMA) Attack Software

pe-bear

Portable Executable reversing tool with a friendly GUI

pe-infector

Crossplatform tool for inject shellcode into .exe binaries (x86 and x64)

pe_to_shellcode

Converts PE into a shellcode

peafl64

Static Binary Instrumentation tool for Windows x64 executables

persistassist

Fully modular persistence framework

pitraix

Modern Self-Modifying Cross-Platform Peer-to-Peer Botnet over TOR