slyd0g Goto Github PK

cornershot

Amplify network visibility from multiple POV of other hosts

crescendo

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.

crossbuild

:earth_africa: multiarch cross compiling environments

cryptxorb64-objc

just storing my code somewhere to re-use later

csops

Utility to manipulate codesigned application in Mac OS X. Demonstrate the use of csops system call.

cyberthreatintel

Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups

danspecial

Weaponizing Gigabyte driver for priv escalation and bypass PPL

darling

Darwin/macOS emulation layer for Linux

debian8jessiesetup

Run on a fresh install of Debian 8 Jessie to create a new user, give sudo privileges, update your system, update your source list and more!

deepsea

DeepSea Phishing Gear

delegationbof

dllhijacktest

DLL and PowerShell script to assist with finding DLL hijacks

domaintools

内网域渗透小工具

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dotfiles

dotnetdebug

A simple POC to demonstrate the power of .NET debugging for injection

doubleagent

Zero-Day Code Injection and Persistence Technique

dyld-shared-cache-big-sur

Modifications to Apple's dyld project to fix Objective-C information when extracting dyld_shared_cache from macOS Big Sur to help Hopper generate readable pseudocode.

dylibhijacktest

Discover DYLD_INSERT_LIBRARIES hijacks on macOS

edrsandblast

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

evasions

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

eventcleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

excel-phish

Phish password protected Excel-Files

exe_to_dll

Converts a EXE into DLL

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

frostbyte

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.