askyeye Goto Github PK

syscall_exploit_cve-2018-8897

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).

syscallsextractor

syscalltables

Windows NT x64 Syscall tables

sysmon

Sysmon shenanigans

sysmonente

sysmoneop

sysmonquiet

RDLL for Cobalt Strike beacon to silence sysmon process

system-mechanic-exploit

https://0x64marsh.com/?p=314

systemgap

SystemGap - Maintenance Tools after privilege escalation

systemnightmare

Gives you instant SYSTEM command prompt on all supported and legacy versions of Windows

systemtoken

Steal privileged token to obtain SYSTEM shell

systracingpoc

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers2_x86

X86 version of syswhispers2 / x86 direct system call

syswhispers2bof

Script to use SysWhispers2 direct system calls from Cobalt Strike BOFs

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

syswhispers3winhttp

SysWhispers3 and WinHttp - AV/EDR evasion via direct system calls. 基于SysWhispers3增添WinHttp分离加载，可免杀360核晶与Defender等杀软。

t.d.p

Using Thread Description To Hide Shellcode

t1191--cmstp

takemyrdp2.0

An updated version of keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe)

talks

Some talks about security

talks-1

talks-and-publications

Released presentations of my talks + code that used during these talks

talktocode

talon

(Demo) 3rd party agent for Havoc

talon-1

A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.

tamperetw

PoC to demonstrate how CLR ETW events can be tampered.

tamperingsyscalls

tangledwinexec

C# PoCs for investigation of Windows process execution techniques