thewover Goto Github PK

.net-profiler-dll-hijack

Implementation of the .NET Profiler DLL hijack in C#

adtimeline

PowerShell script creating a timeline with Active Directory replication metadata

aggressorcollection

Collection of awesome Cobalt Strike Aggressor Scripts. All credit due to the authors

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

allthethingsexec

Executes Blended Managed/Unmanged Exports

amber

Reflective PE packer.

amsi_bypassr

AMSI bypass stager generator

amsiscanbufferbypass

anathema

.NET instrumentation framework

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

angryorchard-original

Original proof of concept I submitted to brokers demonstrating the vulnerability in hopes of getting rid of it.

antinet

.NET anti-managed debugger and anti-profiler code

antinet-1

Anti-.NET Malware/Packers - Detect most .NET Packers (and some native) used for malware.

apc-ppid

Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.

applicationwhitelistbypasstechniques

A Catalog of Application Whitelisting Bypass Techniques

apt34

APT34/OILRIG leak

apt_report

Interesting apt report collection and some special ioc express

asmresolver

PE reader and editor. Native headers and resources, .NET metadata and disassemblers (x86 and cil).

assemblyloader

Loads .NET Assembly Via CLR Loader

asyncrat-c-sharp

Remote Administration Tool For Windows C#

asyncrat-vb.net

Remote Administration Tool For Windows VB.NET

atom-bombing

Brand New Code Injection for Windows

attack

MITRE ATT&CK Windows Logging Cheat Sheets

attack-python-client

Python Script to access ATT&CK content available in STIX via a public TAXII server

attack-tools

Utilities for MITRE™ ATT&CK

beercode

Free beerware-quality code in exchange for beer money (if you are so inclined). ;-)

bh_aws

Materials for AWS Training

blackbone

Windows memory hacking library

bleak

A Windows native DLL injection library written in C# that supports several methods of injection.

browser-externalc2

External C2 Using IE COM Objects