bloggins Goto Github PK

msihijacker

pagetableinjection

Code Injection, Inject malicious payload via pagetables pml4.

poolviewer

An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.

powerpunch

A collection of PowerScripts for Pentesting

ppldump

Dump the memory of a PPL with a userland exploit

ppldump_bof

A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.

privesccheck

Privilege Escalation Enumeration Script for Windows

project

pypowersplit

Split a Powershell script, like PowerView, into base64 encoded functions

redteamcsharpscripts

C# Script used for Red Team

remotefetchxll

remotereflectivedll

remotereflectiveexe

remotestager

remotestagerinjection

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

securehacks

shellcode-in-memory-decoder

A simple C implementation to decoded your shellcode and writes it directly to memory

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

shelllink

A .NET Class Library for processing ShellLink (LNK) files

stuff

subtee-oldfiles

symlinkcallback

A driver that hooks C: volume using symbolic link callback to track all FS access to the volume

syscall_shellcodeload_csharp

Load shellcode via syscall

vulnerable-ad

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

windows-internals

My notes while studying Windows internals

windowsdllsexport

A list of all the DLLs export in C:\windows\system32\

wmimplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

wt

xll-aes