epichoxha Goto Github PK
Name: epichoxha
Type: User
Bio: OSCP | OSEP | CRTO
Location: ::1
Name: epichoxha
Type: User
Bio: OSCP | OSEP | CRTO
Location: ::1
A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering
Pass the Hash to a named pipe for token Impersonation
Get file less command execution for lateral movement.
.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py
A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.
A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.
Syscall Shellcode Loader (Work in Progress)
Adversary Emulation Framework
Hiding GoPhish from the boys in blue
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.
(Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
StandIn is a small .NET35/45 AD post-exploitation toolkit
Script written in bash to exploit sudo misconfigurations and vulnerabilities
Real fucking shellcode encryption tool
Another meterpreter injection technique using C# that attempts to bypass Defender
BOF and Shellcode for full DLL unhooking using dynamic syscalls
AV/EDR evasion via direct system calls.
SysWhispers on Steroids - AV/EDR evasion via direct system calls.
This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, intelligence gathering, physical intrusion, phishing, mobile apps, iot, social engineering, etc.
Threadless Process Injection using remote function hooking.
Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.
Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
Ad hoc pentest stuff
The goal of this repository is to document the most common techniques to bypass AppLocker.
update-golang is a script to easily fetch and install new Golang releases with minimum system intrusion
Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.