vforvasilis's starred repositories
malicious-pdf
💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
exe_to_dll
Converts a EXE into DLL
ntlm_theft
A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
DarkWidow
Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing
RansomLord
RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware pre-encryption.
KRBUACBypass
UAC Bypass By Abusing Kerberos Tickets
dcomhijack
Lateral Movement Using DCOM and DLL Hijacking
RemoteShellcodeExec
Execute shellcode from a remote-hosted bin file using Winhttp.
Jormungandr
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
SweetDreams
Implementation of Advanced Module Stomping and Heap/Stack Encryption
D1rkInject
Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, and reverting back memory protections and original memory state
restincode
A memorial site for Hackers and Infosec people who have passed
wptsextensions.dll
WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.
chacha20-c
ChaCha20 stream cipher implemented in C
BetterPipename
Example of using Sleep to create better named pipes.
CertifyKit
Active Directory certificate abuse
chacha20poly1305
Simple ChaCha20Poly1305@Bitcoin C implementation