bfuzzy1's repositories
auditd-attack
A Linux Auditd rule set mapped to MITRE's Attack Framework
artifacts-kit
Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.
CheekyBlinder
Enumerating and removing kernel callbacks using signed vulnerable drivers
CobaltPatch
Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be Appended In Stage / Post-Ex Blocks. Made for C Programmers
community
All open-source resources for the Prelude Operator C2 platform
DLLsForHackers
Dll that can be used for side loading and other attack vector.
dracula-ida
🧛🏻♂️ Dracula theme for IDA Pro
etwbreaker
An IDA plugin to deal with Event Tracing for Windows (ETW)
goloader
load and run golang code at runtime.
GoPurple
Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions
hearsay
Proxy-aware reverse HTTP proxy.
injection
Windows process injection methods
IntelRAGU
Intel Retrieval Augmented Generation (RAG) Utilities
Kernel-Bridge
Windows kernel hacking framework, driver template, hypervisor and API written on C++
Mapping-Injection
Just another Windows Process Injection
masm_shc
A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
MSTIC-Sysmon
Anything Sysmon related from the MSTIC R&D team
NINA
NINA: No Injection, No Allocation x64 Process Injection Technique
ntdll
ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
ntoskrnl
Windows Kernel nt files - To research windows kernel
PEzor
Read the blog post here: https://iwantmore.pizza/posts/PEzor.html
Priv2Admin
Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.
replica
Ghidra Analysis Enhancer 🐉
SharpCollection
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
SymStore
The history of Windows Internals via symbols.
win32k
Windows Kernel win32k files - To research windows kernel
windows-ps-callbacks-experiments
Files for http://deniable.org/windows/windows-callbacks
windows_sdk_data
Windows API listing in JSON format - generated from SDK headers + SDK API documentation