seahop Goto Github PK

hellsgateppid

Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process

hijacklibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

hollow

EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

hook-kdtrap

ida_gpt

idle-abuse

A method to execute shellcode using RegisterWaitForInputIdle API.

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

inject-assembly

Inject .NET assemblies into an existing process

injection

inline-execute-pe

Execute unmanaged Windows executables in CobaltStrike Beacons

inline-syscall

Inline syscalls made for MSVC supporting x64 and x86

inlinewhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

inno-shellcode-example

Run shellcode through InnoSetup code engine.

inveigh

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

inveighzero

.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

iori_loader

UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

itaskhandler

Implementation of ITaskHandler in C++

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

kdu

Kernel Driver Utility

kerberoast

Kerberoast attack -pure python-

kernelhub

:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

kittystager

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to be able to have a web server and some kitten and be able to use the with any shellcode.

knowndllunhook

Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs

koadic

zerosum0x0's Koadic

koh

The Token Stealer

krbrelay

Framework for Kerberos relaying

kwprocessor

Advanced keyboard-walk generator with configureable basechars, keymap and routes

lazzzy

laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.

ldrdllnotificationhook

Hook all callbacks which are registered with LdrRegisterDllNotification