leftp Goto Github PK
Name: Lefteris Panos
Type: User
Twitter: lefterispan
Location: GR
Name: Lefteris Panos
Type: User
Twitter: lefterispan
Location: GR
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
Implementation of SpoolSample without rDLL
Print Spooler Named Pipe Impersonation for Cobalt Strike
Library of BOFs to interact with SQL servers
A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode
A C# SSH client
StandIn is a small .NET35/45 AD post-exploitation toolkit
This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate and use whatever token present at any process
Injects shellcode into remote processes using direct syscalls
Silence EDRs by removing kernel callbacks
OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, CLM and Script Block Logging disabled at startup
Redirecting (specific) TCP, UDP and ICMP traffic to another destination.
Subdomain Enumeration Wordlist. 8956437 unique words. Updated.
Another meterpreter injection technique using C# that attempts to bypass Defender
Demo service that runs in svchost.exe
Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.
One gate to all syscalls!
X86 version of syswhispers2 / x86 direct system call
SysWhispers on Steroids - AV/EDR evasion via direct system calls.
PoC to demonstrate how CLR ETW events can be tampered.
C# PoCs for investigation of Windows process execution techniques
Misc TaskScheduler Plays
Send phishing messages and attachments to Microsoft Teams users
WINDOWS TELEMETRY权限维持
Content from THOTCON 0xa talk
Threadless Process Injection using remote function hooking.
Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.
Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.