passthehashbrowns

hiding-your-syscalls. Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction within NTDLL.

SharpRDPThief. A C# implementation of RDPThief to steal credentials from RDP.

BOFMask. C

VectoredExceptionHandling. C

Being-A-Good-CLR-Host. C

SharpBuster. SharpBuster is a C# implementation of a directory brute forcing tool. It's designed to be used via Cobalt Strike's execute-assembly and similar tools, when running a similar tool over a SOCKS proxy is not feasible.

suspendedunhook. C

DInvokeProcessHollowing. C#

hook-integrity-checks. C

Haskell-Reverse-Shell. Haskell

PrefetchMute. C#

DriverBlock. C++

passthehashbrowns.github.io. Ruby

execute-multiple-assemblies. C++

OffensiveHaskell. Haskell

XorShellcode. C#

MicroBurst. A collection of scripts for assessing Microsoft Azure security

process_doppelganging. My implementation of enSilo's Process Doppelganging (PE injection technique)

Azure-Managed-Identity-REST-Examples. PowerShell