nero22k Goto Github PK

above

Network Vulnerability Scanner

akamai-security-research

This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

amsi_rubeus_bypass

android-emulator-hypervisor-driver

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

aquarmoury

My musings in C and offensive tooling

awesome-av-edr-xdr-bypass

Awesome AV/EDR/XDR Bypass Tips

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

banshee

Experimental Windows x64 Kernel Rootkit.

blobrunner

Quickly debug shellcode extracted during malware analysis

book-code

book code

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

c_keylogger

Windows Keylogger without CRT library

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

callstack-spoofer

This tool will allow you to spoof the return addresses of your functions as well as system functions.

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

concealed_code_execution

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

custom_c2

Very basic C2 which will slowly evolve into serious C2

cve-2021-4034

Dirty PoC for CVE-2021-4034 (Pwnkit)

cve-2023-21768

Windows_AFD_LPE_CVE-2023-21768

cve-2023-29360

Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver

cve-2023-36802

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

cybersec2023-byovd-demo

detoursnt

Detours with just single dependency - NTDLL

edr-bypass-demo

Some demos to bypass EDRs or AVs by 78itsT3@m

edrkiller

edrs

eneio

EneIo driver exploit

etwconsumernt

Simple project that demonstrates how an ETW consumer can be created just by using NTDLL