thewover Goto Github PK

dynamicwrapperdotnet

Dynamically Loads Assembly and Calls Methods from JScript

easynet

Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library. Algorithm: Data <-> GZip <-> AES-256 <-> Base64.

ebook-bypassingavsbycsharp

eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

ebowla

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

emojiiencoding

Encode/decode arbitrary ASCII text to Unicode emojiis

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

excel4-dcom

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

externalc2

A library for integrating communication channels with the Cobalt Strike External C2 server

family

Collection of Malware source code by Language and Family.

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

fireelf

Fileless Linux Malware Framework

fsmemfs

Memory File System written in F# (using WinFsp)

fuzzysecurity-powershell-suite

gargoyle

A memory scanning evasion technique

getprocaddress

Recreation of GetProcAddress without external dependencies on Windows Libraries

ghost-in-the-logs

Evade sysmon and windows event logging

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队

go-dotnet

Go wrapper for the .NET Core Runtime.

go-execute-assembly

Allow a Go process to dynamically load .NET assemblies

goos

Go Operating System

gym-malware

hacker

Hacker is a Jekyll theme for GitHub Pages

harmony

A library for patching, replacing and decorating .NET and Mono methods during runtime

heavens-gate-2.0

Executes 64bit code from a 32bit process

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

holly.memorylib

A specialized C# memory-accessing library

hostedpumpkin

Submission, compilation and execution of C# code snippets, using an unmanaged CLR Host