cvlabsio Goto Github PK

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-indepth

Understanding the operation and limitations of Sysmon's events

sysmon-modular

A repository of sysmon configuration modules

sysppidspoofing

give me sedebugprivilege I will become a SYSTEM by spoofing a parent process runned as AUTHORITY NT\system

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

tailorscan

自用缝合怪内网扫描器，支持端口扫描，识别服务，获取title，扫描多网卡，ms17010扫描，icmp存活探测。

talks-and-rants

Repo for my talks...and stuff

talks_modern_maldev

tamperingsyscalls

tangledwinexec

C# PoCs for investigation of Windows process execution techniques investigation

tcpcannon

Offensive Linux tool for network attacks. Built from the ground with only C.

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

teamserver

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

terraldr

A Payload Loader Designed With Advanced Evasion Features

tests

thematrix

a PE Loader and Windows API tracer. Useful in malware analysis.

thephish

ThePhish: an automated phishing email analysis tool

things-appcontainer-knows

Disclosing information from an AppContainer.

thinkpwn

Started as arbitrary System Management Mode code execution exploit for Lenovo ThinkPad model line, ended as exploit for industry-wide 0day vulnerability in machines of many vendors

thread-hijacking

Thread Execution Hijacking technique

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

thundershell

Python / C# Unmanaged PowerShell based RAT

ticktock

tikitorch

Process Injection

titanhide

Hiding kernel-driver for x86/x64.

titanldr

Public variation of Titan Loader. Tweaks Cobalt Strike's behavior with Import Address Table Hooks

toasterloader

tokentacticsv2

A fork of the great TokenTactics with support for CAE and token endpoint v2