naksyn Goto Github PK

beacon

Former attempt at creating a independent Cobalt Strike Beacon

bouncygate

HellsGate in Nim, but making sure that all syscalls go through NTDLL.DLL (as in RecycledGate).

darkloadlibrary

LoadLibrary for offensive operations

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dojoloader

Generic PE loader for fast prototyping evasion techniques

dropspawn_bof

CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking

embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

foliage

Public variation of FOLIAGE ( original developer )

goad

game of active directory

gregsbestfriend

GregsBestFriend process injection code created from the White Knight Labs Offensive Development course

grimreaper

A improved memory obfuscation primitive using a combination of special and 'normal' Asynchronous Procedural Calls

havoc

The Havoc Framework

krbdump

A way to extract tickets in case I need to purge and restore tickets on the fly.

krblist

Old post-ex for listing kerberos tickets. A terribly written clone of `klist`

moduleshifting

Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctypes

offensivepipeline

OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.

packer_development

Slides & Code snippets for a workshop held @ x33fcon 2024

pmd

processstomping

A variation of ProcessOverwriting to execute shellcode on an executable's section

pyramid

a tool to help operate in EDRs' blind spots

python-bof-runner

Python inline shellcode injector that could be used to run BOFs by leveraging BOF2shellcode

pythonmemorymodule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

rwx-dlls-for-manual-mapping

Here are a few rwx dlls your can use to manual map your cheat dll, they will prob get checked soon...

talks

Repo containing my public talks

titanldr

Public variation of Titan Loader

unhookingpatch

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime