med0x2e

Mohamed El Azaar's repositories

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Language:C#MIT967 20 10

GadgetToJScript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

Language:C#GPL-3.0830 25 14

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

Language:C++527 19 3

NTLMRelay2Self

An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav).

Language:C383 6 1

NoAmci

Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().

Language:C#211 70

vba2clr

Running .NET from VBA

Language:VBA128 30

NET-Assembly-Inject-Remote

.NET assembly local/remote loading/injection into memory.

Language:C#117 90

genxlm

A simple script to generate JScript code for calling Win32 API functions using XLM/Excel 4.0 macros via Excel.Application "ExecuteExcel4Macro"

Language:GoGPL-3.087 3 1

RT-EWS

A Powershell module including a couple of cmdlets for EWS Enum/Exploitation.

Language:PowerShell17 20

CSharpScripts

Collection of C# scripts

Language:C#5 20

SharpView

C# implementation of harmj0y's PowerView

Language:C#MIT3 10

DidierStevensSuite

Please no pull requests for this repository. Thanks!

Language:YARA2 10

ProcessHider

Post-exploitation tool for hiding processes from monitoring applications

Language:C++2 10

elk-detection-lab

An ELK environment containing interesting security datasets.

Language:Shell1 10

Scrncat

A script using OCR (pytesseract) and PIL to rename/order/group Screenshots into PR/RT phases based on which RT/PT stage executed commands correspond to & Redact passwords based on common password patterns (Regex) or a passwords/hashes list of choice.

Language:Python1 20

ICS-Security-Tools

Tools, tips, tricks, and more for exploring ICS Security.

Language:PythonCC-BY-4.0010

maruos

Your phone is your PC.

Apache-2.0000