benheise Goto Github PK

ddeautocs

A cobaltstrike script that integrates DDEAuto Attacks

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure

debian-security-linux

A Debian based security testing distro

debian_ssh

Debian OpenSSL Predictable PRNG

deception-as-detection

:honeybee: Deception based detection techniques mapped to the MITRE’s ATT&CK framework

delete-self-poc

A way to delete a locked file, or current running executable, on disk.

dendroid

Android Trojan

det

(extensible) Data Exfiltration Toolkit (DET)

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

dev.microsoftedge.com-vms

Scripts used to generate the free VMs available at https://dev.microsoftedge.com

devalias-pentest

A collection of Ethical Hacking/Penetration Testing related notes and information

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x

dl-docs

Documentation for DetectionLab

dll4shell

Shellcode launcher for AV bypass

dll_hijacker_rewritten

dns-black-cat

Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode over DNS protocol

dns-exfiltration

dns-persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

dnscat2

dnsftp

Client/Server scripts to transfer files over DNS. Client scripts are small and only use native tools on the host OS.

dnsstager

Hide your payload in DNS

dotnetavbypass

This project uses the .NET framework to bypass Antivirus solutions.

doubleagent

Zero-Day Code Injection and Persistence Technique

doublepulsar-poc

sample driver for hooking srv!SrvTransactionNotImplemented in src!SrvTransaction2DispatchTable (DoublePulsar PoC) (x64)

doublepulsar_arch-check

Shellcode magic POC used by DoublePulsar to determine architecture

dr0p1t-framework

A framework that creates an advanced FUD dropper with some tricks ;)

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

driver-template

Bare template for a Kernel Mode Driver

driverinjectdll

Using Driver Global Injection dll, it can hide DLL modules

driverloader

Small tool which loads Windows drivers with NtLoadDriver