msf-ntdll Goto Github PK

tiny-aes-c

Small portable AES128/192/256 in C

toggle_token_privileges_bof

Syscall BOF to arbitrarily add/detract process token privilege rights.

token-priv

Token Privilege Research

tokenattack

tokenplayer

Manipulating and Abusing Windows Access Tokens.

tokenprivilegeassigner

tokentacticsv2

A fork of the great TokenTactics with support for CAE and token endpoint v2

tokenvator

A tool to elevate privilege with Windows Tokens

toolkit

The essential toolkit for reversing, malware analysis, and cracking

tools

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

trigen

Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

trustjack

Yet another PoC for https://www.wietzebeukema.nl/blog/hijacking-dlls-in-windows

tymspecial

SysWhispers integrated shellcode loader w/ ETW patching & anti-sandboxing

uac-silentclean

New UAC bypass for Silent Cleanup for CobaltStrike

uac_exploit

Escalate as Administrator bypassing the UAC affecting administrator accounts only.

ueditorgetshell

UEditor编辑器批量GetShell / Code By:Tas9er

ultimatewdacbypasslist

A centralized resource for previously documented WDAC bypass techniques

undefender

Killing your preferred antimalware by abusing native symbolic links and NT paths.

unhookingpoc

A small commented POC for removing API hooks placed by AV/EDR.

unhookme

UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red Teams malware

unnamed_rat

Command-line Remote Access Tool (RAT)

upsilon

Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used

urbanbishoplocal

usefulsources

Redteam, Pentest, APT's, Blogs, Talks, Slides links and notes

uuidshellcodeexec

PoC for UUID shellcode execution using DInvoke

vanillarat

tuorial VanillaRAT

vba-macro-projects

This repository is a collection of my malicious VBA projects.

vba-macro-reverse-shell

Fully functioning reverse shell written entirely in VBA.

vehapiresolve