markshark3 Goto Github PK

anonymous

attiny85

RubberDucky like payloads for DigiSpark Attiny85

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

byob

An open-source post-exploitation framework for students, researchers and developers.

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

digispark-scripts

USB Rubber Ducky type scripts written for the DigiSpark.

dr0p1t-framework

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

experienced-pentester-osep

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

injectallthethings

Seven different DLL injection techniques in one single project.

invisible_fork_bomb_hid

The script creates and starts a vbs that executes cmd.exe over and over without visible windows (Fork bomb -> Freezes the PC).

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

kasperskyhook

Hook system calls on Windows by using Kaspersky's hypervisor

koadic

Koadic C3 COM Command & Control - JScript RAT

living-off-the-land

Fileless attack with persistence

mimikatz

A little tool to play with Windows security

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

python

My Python Examples

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

uboat

HTTP Botnet Project

ufonet

UFONet - Denial of Service Toolkit

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)