janedoe-lab Goto Github PK

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

bdvl

bdvl

c-to-shellcode-examples

capsulecorp-pentest

Vagrant VirtualBox environment for conducting an internal network penetration test

createhiddenaccount

A tool for creating hidden accounts using the registry.

createprocess

A small PoC that creates processes in Windows

cve-2021-31728

vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.

cve-2022-42045

cve-2022-42046

CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

dllprox

Automatic DLL comment link generation and explaination of the DLL Proxying techniques

dnscat2

dnsstager

Hide your payload in DNS

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dumpcreds

foliage

Experiment on reproducing Obfuscate & Sleep

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

impacket

Impacket is a collection of Python classes for working with network protocols.

internal-network-pentest-mindmap

MindMap of common Internal Network Pentest workflow and commands.

kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

kopycat

Linux Kernel module-less implant (backdoor)

kt

Kernel file/process/object tool

lastenzug

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

lief

LIEF - Library to Instrument Executable Formats

llvm

LLVM based obfuscator

midnighttrain

Covert Stage-3 Persistence Framework

ndisapi

Windows Packet Filter API library

nsproxy

Make arbitrary applications to use a specified SOCKS / HTTP proxy

ntcreateuserprocess

Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html

ntdllpiperead

Opens 2 named pipes and uses cmd.exe to read in the contents of ntdll.dll between pipes. Tweaked the code from x86matthew's site https://www.x86matthew.com and fixed up a little to work in C.