joe-desimone Goto Github PK

amd-ryzen-master-driver-v17-exploit

Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

antimalwareblight

Execute PowerShell code at the antimalware-light protection level.

backstab

A tool to kill antimalware protected processes

blacksmith

Next-gen Rowhammer fuzzer that uses non-uniform, frequency-based patterns.

clrguard

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2021-1675

Impacket implementation of CVE-2021-1675

dynamicwrapperdotnet

Dynamically Loads Assembly and Calls Methods from JScript

elastic-container

Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

experiments

Expriments

foliage

Experiment on reproducing Obfuscate & Sleep

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

lazagne

Credentials recovery project

malware-replay

malware-samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

patriot

printnightmare

rep-research

research

VerSprite Security Research

revenant

Revenant - A 3rd party agent for Havoc that aim to demonstrate evasion techniques in the context of a C2 framework

stfuedr

Silence EDRs by removing kernel callbacks

titanldr-ng

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

windows-itpro-docs

This is used for contributions to the Windows 10 content for IT professionals on docs.microsoft.com.