waawaa Goto Github PK

amsi_rubeus_bypass

breakcyserver

cheatsheets

random brain dumps

cnn

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crowdstrikedllfuzzer

cve-2021-21972

CVE-2021-21972 Exploit

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

defendercheck

Identifies the bytes that Microsoft Defender flags on.

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

detoursnt

Detours with just single dependency - NTDLL

edrs

edrsandblast

exploiting-tips

freshycalls

FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

harnesscrowdstrike

hooked-injector

Hooked create process injection for meterpreter

hyperdbg

State-of-the-art native debugging tool

idapython-cheatsheet

Scripts and cheatsheets for IDAPython

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

mapping-injection

Just another Windows Process Injection

no-consolation

A BOF that runs unmanaged PEs inline

osed

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

parse_iat

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

teamfiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

test

test

unhook_from_memory

waawaa.github.io