klezVirus

followers

following

stars

BSI CSIR

IT

https://klezvirus.github.io

klezVirus's repositories

inceptor

Template-Driven AV/EDR Evasion Framework

Language:AssemblyNOASSERTION1560 35 48

SysWhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Language:PythonApache-2.01243 23 15

CVE-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Language:HTML794 19 17

SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

Language:C++BSD-3-Clause661 11 1

chameleon

PowerShell Script Obfuscator

Language:PythonMIT484 11 4

vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

Language:PythonGPL-2.0419 10 4

NimlineWhispers3

A tool for converting SysWhispers3 syscalls for use with Nim projects

Language:Nim136 50

klezVirus.github.io

CyberSec Blog

Language:JavaScript96 90

SharpLdapRelayScan

C# Port of LdapRelayScan

Language:C#77 40

obfuscator

ollvm, based on llvm-clang 5.0.2, 6.0.1, 7.0.1, 8.0, 9.0, 9.0.1

AsStrongAsFuck

A console obfuscator for .NET assemblies.

Language:C#MIT10 20

LoGiC.NET

A more advanced free and open .NET obfuscator using dnlib.

Language:C#MIT10 10

deser-node

NodeJS Deserialization Payload Generator

Language:JavaScriptGPL-3.09 30

HWSyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

Language:C++8 10

LdrLibraryEx

A small x64 library to load dll's into memory.

Language:C5 10

BOFRyptor

Language:Assembly4 10

titanldr-ng

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

Language:C4 10

XSStrike

Most advanced XSS scanner.

Language:PythonGPL-3.04 20

angryorchard

A kernel vulnerability used to achieve arbitrary read-write on Windows prior to July 2022

Language:C3 10

klezVirus

Temporary unavailable...

3 30

ADCSPwnNG

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Language:C#2 10

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Language:CBSD-3-Clause2 10

MalMemDetect

Detect strange memory regions and DLLs

Language:C++GPL-3.02 20

overlord

Overlord - Red Teaming Infrastructure Automation

Language:PythonMIT2 10

bootdoor

An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot

Language:C1 10

oldrivrs

some old drivers and misc crap from a while ago

Language:C1 10

tiny-json

The tiny-json is a versatile and easy to use json parser in C suitable for embedded systems. It is fast, robust and portable.

Language:CMIT1 10

node-hello

Hello World for Node.js

Language:JavaScript010

preboot

Experiment with d_olex's firmware and conducting "preboot" attack

Language:C010

YouMayPasser

You shall pass

Language:PowerShell020