wilsonfisk77 Goto Github PK

adamantium-thief

:key: Decrypt chromium based browsers passwords, cookies, credit cards, history, bookmarks, autofill. Version > 80 is supported.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

amsitrigger

The Hunt for Malicious Strings

aviator

Antivirus evasion project

beginners-guide-to-obfuscation

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

blocketw

.Net Assembly to block ETW telemetry in current process

checkplease

Sandbox evasion modules written in PowerShell, Python, Go, Ruby, C, C#, Perl, and Rust.

chimera

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

creds

Some usefull Scripts and Executables for Pentest & Forensics

cve-2021-40444

CVE-2021-40444 PoC

cve-2021-40444_builders

This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

docker-nginx-proxy-manager

Docker container for Nginx Proxy Manager

evilginx

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

firefox-thief

:fox_face: Decrypt gecko based browsers passwords, cookies, history, bookmarks.

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hiddenpowershell

Run powershell.exe hidden; since `-WindowStyle Hidden` isn't sufficient.

hiddenrun

Run something completely hidden from the end-user.

invoke-sharpcradle

Load C# Code straight to memory

invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

localamsi.fail

This is a port of AMSI.fail,i modify the code to make it C# 5 compatible and can be executed on Windows 10 without installing any extra requirements.AMSI.fail itself generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

maliciousmacrogenerator

Malicious Macro Generator

netloader

Loads any C# binary in mem, patching AMSI + ETW.

nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface

noisette-obfuscator

An Obfuscator for .NET assembly

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

parentprocessidspoof

Spoof parent process ID