Idov31

Ido Veltzman's repositories

Nidhogg is an all-in-one simple to use rootkit.

Language:C++GPL-3.01622 32 15

Sandman is a NTP based backdoor for red team engagements in hardened networks.

Language:C#GPL-3.0692 13 2

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Language:RustGPL-3.0670 18 8

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

Language:CGPL-3.0538 9 2

Venom is a library that meant to perform evasive communication using stolen browser socket

Language:C++GPL-3.0364 40

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

Language:PowerShellGPL-3.0248 13 1

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

Language:C++GPL-3.0214 50

NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg

Language:C++GPL-3.040 20

Simple ransomware written in Rust. Part of the building a rustomware blog post.

Language:YARAGPL-3.030 20

Listing UDP connections with remote address without sniffing.

Language:C++GPL-3.028 4 1

C# API for Nidhogg rootkit

Language:C#GPL-3.01200

Rust Weaponization for Red Team Engagements.

Language:Rust11 10

This repository contains the POC and the scanner to catch the Shortcut Hotkey Exploitation method.

Language:PythonGPL-3.06 30

Released presentations of my talks + code that used during these talks

Language:C++GPL-3.06 20

Language:TypeScriptGPL-3.03 20