mmmmcoffee Goto Github PK

0xdarkvortex-malwaredevelopment

This repo will contain code snippets for blogs: Malware on Steroids written by me at https://scriptdotsh.com/index.php/category/malware-development/

advanced-process-injection-workshop

amsi-killer

Lifetime AMSI bypass

athena

atompepacker

A Highly capable Pe Packer

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

ceos

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

clearas

Windows autostart, context menu, service and scheduled task cleansing program

clroxide

A rust library that allows you to host the CLR and execute dotnet binaries.

cobaltstrike

CobaltStrike's source code

codecave

A bunch of scripts and code i wrote.

coffloader

com-explained

cpp-implant

A simple implant showcasing modern C++

cs-remote-ops-bof

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

cypherhound

Python3 terminal application that contains 400 Neo4j cyphers for BloodHound data sets and 383 GUI cyphers

dll-hijack-search-order-bof

DLL Hijack Search Order Enumeration BOF

dllloadpath

eagle-rs

Rusty Rootkit: Windows Kernel Driver in Rust for Red Teamers

edrsandblast

elfloader

evilrdp

exploitkitpub

exportstoc

Used to create wrappers and proxy libraries for Windows binaries.

freebokuloader

A simple BOF that frees UDRLs

hashdb

Assortment of hashing algorithms used in malware

havoc

The Havoc Framework