solomonsklash Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

amsi-etw-patch

Patch AMSI and ETW

angryorchard

A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.

apcldr

Payload Loader With Evasion Features

apihashing

Replacing GetModuleHandle & GetProcAddress as a God

apiset

API Set resolver for Windows

apiunhooker

C++ function that will automagically unhook a specified Windows API

app-sec-wiki

Files for appsecwiki.com

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

atpminidump

Evading WinDefender ATP credential-theft

autocleanup

Macros and helper inlines to automatically cleanup scoped resources

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

beacon

Former attempt at creating a independent Cobalt Strike Beacon

beaconhunter

Detect and respond to Cobalt Strike beacons using ETW.

beroot

Privilege Escalation Project - Windows / Linux / Mac

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

blacklotus

A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.

blacklotus2

BlackLotus UEFI Windows Bootkit

bof-foreignlsass

bof2shellcode

POC tool to convert CobaltStrike BOF files to raw shellcode

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

c-to-shellcode-examples

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

caro-kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

certipy

Python implementation for Active Directory certificate abuse

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

cobalt_strike_extension_kit

Tired of typing execute-assembly everytime you use Cobalt Strike? Clone this.

coffeeldr

Beacon Object File Loader