malsecanonim Goto Github PK

abd

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

caboom

A malicious .cab creation tool for CVE-2021-40444

chimera

Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs

conpresentations

Slide decks from my conference presentations

crossc2

generate CobaltStrike's cross-platform payload

curveball

PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

curveball-1

CVE-2020-0601 #curveball - Alternative Key Calculator

cve-2018-20250-winrar-ace

Proof of concept code in C# to exploit the WinRAR ACE file extraction path (CVE-2018-20250).

cve-2019-0604

CVE-2019-0604

cve-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4

cve-2020-1337-poc

poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

cve-2020-1472

cve-2021-28663

A basic PoC leak for CVE-2021-28663 (Internal of the Android kernel backdoor vulnerability)

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-40444_builders

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

desharialize

dlinject

Inject a shared library (i.e. arbitrary code) into a live linux process, without ptrace

exploits

Our collection of Exploits;;))

fakelogonscreen

Fake Windows logon screen to steal passwords

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

lkwa

Lesser Known Web Attack Lab

loadlibrary-getprocaddress-replacements

LoadLibrary() and GetProcAddress() Replacement Functions

lokistealer

lsassy

Extract credentials from lsass remotely

malware_analysis

Tools and code snippets related to malware analysis

memhunter

Live hunting of code injection techniques

misc-powershell-stuff

random powershell goodness