daffodi1 Goto Github PK

c_examples

examples of doing stuff in c

darkloadlibrary

LoadLibrary for offensive operations

dccwbypassuac

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

delayloadinject

Code injection via delay load libraries

delete2system

Weaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM

dent

A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.

detect-keattachprocess

Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.

diagtrack

dingtalk-rce

dlltoshellcode

Fast Conversion Windows Dynamic Link Library To ShellCode

dotnetdebug

A simple POC to demonstrate the power of .NET debugging for injection

driploader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

duckmemoryscan

检测绝大部分所谓的内存免杀马

ducksandboxdetect

沙箱测试,测评国内常见沙箱的代码与结论

ducksyseye

SysEye是一个window上的基于att&ck现代EDR设计**的威胁响应工具

dynamicwrapperex

x64 Registration-Free In-Process COM Automation Server.

edrsandblast

etw-syscall

https://key08.com/index.php/2021/10/19/1375.html

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

from-system-authority-to-medium-authority

Penetration test

gdrv-loader

Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

getout360

强制关闭360 需要管理员权限

ghostwriting

GhostWriting Injection Technique.

gitbook

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

idiagnosticprofileuac

incbin

Include binary files in C/C++

injection

injection-1

Windows process injection methods

interceptiondemo

Sample showing the use of CoGetInterceptor