analyticsearch Goto Github PK

devsecops

Ultimate DevSecOps library

dfscoerce

didierstevenssuite

Please no pull requests for this repository. Thanks!

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

dinvoke_poc

Hardened Proof of Concept of D/Invoke Process Injection malware

dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

diverttcpconn

A TCP packet diverter for Windows platform

dll-hijack-by-proxying

Exploiting DLL Hijacking by DLL Proxying Super Easily

dll-hijack-search-order-bof

DLL Hijack Search Order Enumeration BOF

dll_hijack_detect

Detects DLL hijacking in running processes on Windows systems

dllrunner

Smart DLL execution for malware analysis in sandbox systems

dns_tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

dnscat2

dnsexfiltrator

Data exfiltration over DNS request covert channel

dohc2

DoHC2 allows the ExternalC2 library from Ryan Hanson (https://github.com/ryhanson/ExternalC2) to be leveraged for command and control (C2) via DNS over HTTPS (DoH).

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

donpapi

Dumping DPAPI credz remotely

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dotnetreverseshell

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

dotnettojscript-languagemodebreakout

dploot

DPAPI looting remotely in Python

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

dynamicfinder

A DLL sideloading utility.

eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.

ebowla

Framework for Making Environmental Keyed Payloads

edrs

edrsandblast

embedinhtml

Embed and hide any file in an HTML file

empire

Empire is a PowerShell and Python post-exploitation agent.