kara-4search Goto Github PK

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

lazysign

Create fake certs for binaries using windows binaries and the power of bat files

ldrlibraryex

A small x64 library to load dll's into memory.

ldrlockliberator

For when DLLMain is the only way

libcsearcher

glibc offset search for ctf.

linuxkernelroot

Arm

list-backup-2021.12

llvm-msvc-build

Build llvm-msvc. This version is designed for windows users

logic.net

A more advanced free and open .NET obfuscator using dnlib.

lsassy

Extract credentials from lsass remotely

maldev

Golang library for malware development and red teamers

mappinginjection_csharp

MappingInjection via csharp

md5-hash-changer

C# Application to Change MD5 Hash of any file

modules-dotnet

Faction C2 Framework .NET Modules

msdt-follina

Codebase to generate an msdt-follina payload

multiline-ultimate-assembler

A multiline (and ultimate) assembler (and disassembler) plugin for x64dbg and OllyDbg. A perfect tool for modifying and extending a compiled executable functionality.

neo-confuserex

Updated ConfuserEX, an open-source, free obfuscator for .NET applications

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

newntdllbypassinlinehook_csharp

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

no445-lateral-movement

command execute without 445 port

offensiveph

OffensivePH - use old Process Hacker driver to bypass several user-mode access controls

owned_alignment

Hooking kernel functions by abusing alignment

patch-diffing-in-the-dark

Leveraging patch diffing to discover new vulnerabilities

pcwechat

windows PC微信逆向

peacemaker

PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.

peb-ppidspoofing_csharp

Command line & PPID spoofing

physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

pluto-obfuscator

Obfuscator based on LLVM 12.0.1