msf-ntdll Goto Github PK

edrs

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

ekko

Sleep Obfuscation

elevator

UAC Bypass by abusing RPC and debug objects.

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

emailfinder

Search emails from a domain through search engines

embedinhtml

Embed and hide any file in an HTML file

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

enablesebackupprivilege

enumy

Linux post exploitation privilege escalation enumeration

erebus

CobaltStrike后渗透测试插件

espoofer

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

eva

FUD shellcode Injector

eva2

Another version of EVA using anti-debugging techs && using Syscalls

evasiveprocesshollowing

Evasive Process Hollowing Techniques

evasor

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

eventlogmaster

Cobalt Strike插件 - RDP日志取证&清除

eventviewer-uacbypass

🍊 Orange Tsai EventViewer RCE

eventvieweruac_bof

Beacon Object File implementation of Event Viewer deserialization UAC bypass

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evilpdf

Embedding executable files in PDF Documents

ewsmanage

My exercise of using Exchange Web Service(EWS)

exe_to_dll

Converts a EXE into DLL

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

exploitcapcom

This is a standalone exploit for a vulnerable feature in Capcom.sys

exploits

exportdumper

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

fakelogonscreen

Fake Windows logon screen to steal passwords