leftp Goto Github PK

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

encrypt

Pseudorandom AES-256 encryption designed to protect shellcode and arbitrary strings. C# and C/C++ compatible.

esc

Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration features. While ESC can be a handy SQL Client for daily tasks, it was originally designed for targeting SQL Servers during penetration tests and red team engagements. The intent of the project is to provide an .exe, but also sample files for execution through mediums like msbuild and PowerShell.

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

espoofing

Email sender spoofing test tools

etwsessionhijacking

A Poc on blocking Procmon from monitoring network events

evasion

Windows packer

evasiveprocesshollowing

Evasive Process Hollowing Techniques

evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

evilginx3

sturdy-chainsaw

evtmute

excelntdonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

experiments

Expriments

falconstrike

A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) to the host machine undetected

favfreak

Making Favicon.ico based Recon Great again !

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

fibratus

A modern tool for the Windows kernel exploration and tracing

filesearcher

flavortown

Various ways to execute shellcode

flyingafalseflag

Slides and Code for the BHUSA 2019 talk: Flying a False Flag

forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

forkplayground

An implementation and proof-of-concept of Process Forking.

freshycalls

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

freshycalls_poc

A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯

functionstomping

A new shellcode injection technique. Given as C++ header or standalone Rust program.

ghostbuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

golangincsharp

Project to use Golang inside C#

goldengmsa

GolenGMSA tool for working with GMSA passwords

gpusleep

Move CS beacon to GPU memory when sleeping

hashview

A web front-end for password cracking and analytics