ransomware-book Goto Github PK

at-ps

Adversary Tactics - PowerShell Training

awesome-go

A curated list of awesome Go frameworks, libraries and software

awesome-malware-development

Organized list of my malware development resources

backupdir

Working PoC of using FILE_OPEN_FOR_BACKUP_INTENT to list directories without permissions.

bash-ransomware

Simple Bash Rasomware for use in Cyber Exercises

coldfire

Golang malware development library

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

conti_locker

conti locker ransomware source code leak

creds

Some usefull Scripts and Executables for Pentest & Forensics

deathransom

A ransomware developed in python, with bypass technics, for educational purposes.

deleteshadowcopies

Deleting Shadow Copies In Pure C++

duckhunt

:dart: Prevent RubberDucky (or other keystroke injection) attacks

edrs

enableparentprivileges

enablesebackupprivilege

enumerate-iam

Enumerate the permissions associated with AWS credential set

event-forwarding-guidance

Configuration guidance for implementing collection of security relevant Windows Event Log events by using Windows Event Forwarding. #nsacyber

extensionspoofer

Spoof file icons and extensions in Windows

flames

forkatz

credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege

gonnacry

A Linux Ransomware

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

hidden-input

Easily prompt your users for passwords on Windows without having them revealed in the terminal

hidden-tear

ransomware open-sources

injection

Windows process injection methods

linux-secretive-keylogger

Linux kernel level keylogger that uses Twitter as a covert channel to get information of keystrokes and user data into the attacker using steganography.

malwoverview

Malwoverview is a first response tool to perform an initial and quick triage in a directory containing malware samples, specific malware sample, suspect URL and domains. Additionally, it allows to download and send samples to main online sandboxes.

mauri870-ransomware

A POC Windows crypto-ransomware (Academic)

priv2admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)