jamesit Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

blog

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

edr_detector

EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

empire

Empire is a PowerShell and Python post-exploitation agent.

findobjects-bof

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

firedroidpager

Firedroid Pager - University Project

g0t-b0r3d

A bunch of code and scripts I wrote because I was bored.

infosec-scripts

Python Scripts

invoke-aclpwn

jamesit.github.io

lazy-importer

minimal msvc-windows exclusive lazy importer for C++

papers-presentations

Whitepapers, and other university work that I have created.

ppldump_bof

A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

sharp_dcom_ie_lateral

sharpcliphistory

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.

teamsimplant

vuln-advisories-

Repository of vulnerability advisories and their respective proof of concept's that I have discovered under responsible disclosure.

wsb-detect

wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")