 h00die
|
04c0dede5e
|
fix spelling in some modules
|
2024-01-07 14:06:31 -05:00 |
|
|
bcoles
|
9dcaf93b29
|
Replace deprecated File.exists? with File.exist?
|
2023-03-05 14:30:47 +11:00 |
|
|
sjanusz
|
bbf9e3163a
|
Fix file reads on Windows for binary files
|
2022-03-21 12:47:39 +00:00 |
|
|
Spencer McIntyre
|
6acdced3f0
|
Land #15506, Add evasion module syscall_inject
|
2021-09-22 10:17:13 -04:00 |
|
|
Spencer McIntyre
|
48b76e6149
|
Revert a change that caused a bug
Using the capital W in Windows.h would raise a fatal error when
compiling.
|
2021-09-22 09:55:17 -04:00 |
|
|
kensh1ro
|
c1868d94cd
|
add base64 encoding to shellcode
|
2021-09-12 17:00:24 +03:00 |
|
|
kensh1ro
|
4454a7600a
|
add minor fixes to module code
|
2021-09-10 22:56:04 +03:00 |
|
|
kensh1ro
|
1adde377ec
|
Replace XOR with CHACHA and remove unnecassary code
|
2021-09-06 12:23:46 +03:00 |
|
|
adfoster-r7
|
4a9a15e638
|
Run Rubocop layout rules on modules
|
2021-08-27 17:19:43 +01:00 |
|
|
kensh1ro
|
3bf8a5c1ba
|
Change Alloction from RWX to RW
|
2021-08-21 11:10:07 +03:00 |
|
|
kensh1ro
|
a4a2a4d5cc
|
Add fix for generating random valid C keywords
|
2021-08-05 18:26:58 +03:00 |
|
|
kensh1ro
|
87e7718a25
|
Adding a dynamic way to fetch syscalls
|
2021-08-04 09:31:43 +03:00 |
|
|
kensh1ro
|
907be4418e
|
Added module syscall_inject with documentation
|
2021-08-01 19:22:32 +03:00 |
|
|
bwatters
|
1acfa55dcd
|
rubocop -a fixes
|
2021-02-24 11:38:06 -06:00 |
|
|
Christophe De La Fuente
|
ab9dd177b7
|
Add kernel file version check to avoid BSOD on Win10 x86
|
2021-02-15 21:10:10 +01:00 |
|
|
Christophe De La Fuente
|
ea805b135d
|
Remove markdown and fix numbering in module Description
|
2021-01-28 20:04:48 +01:00 |
|
|
Christophe De La Fuente
|
8af5ee8a32
|
Add Process Herpaderping evasion module and binaries
|
2021-01-22 18:33:10 +01:00 |
|
|
sinn3r
|
a386b2d503
|
Land #12176 - Add evasion module applocker_evasion_regasm_regsvcs
Add evasion module applocker_evasion_regasm_regsvcs
|
2019-09-17 10:20:56 -05:00 |
|
|
Wei Chen
|
97fbfa3a9f
|
Land #12154, Add evasion module applocker_evasion_presentationhost
|
2019-09-12 17:41:01 -05:00 |
|
|
NickTyrer
|
373e409184
|
add module applocker_evasion_workflow_compiler
|
2019-08-08 18:48:10 +01:00 |
|
|
NickTyrer
|
320642e3c0
|
add module applocker_evasion_regasm_regsvcs
|
2019-08-08 18:36:36 +01:00 |
|
|
NickTyrer
|
61a1abab79
|
update csproj arch targeting
|
2019-08-03 10:41:13 +01:00 |
|
|
NickTyrer
|
f675a974a6
|
implement changes suggested by @cbrnrd
|
2019-08-02 16:29:08 +01:00 |
|
|
NickTyrer
|
c8050adab2
|
add module applocker_evasion_presentationhost
|
2019-08-01 08:40:30 +01:00 |
|
|
Wei Chen
|
3a4ec6fe82
|
Cosmetic changes
|
2019-07-31 16:31:44 -05:00 |
|
|
NickTyrer
|
4f7e9bd47c
|
update file creation
|
2019-07-29 20:29:11 +01:00 |
|
|
NickTyrer
|
29627495e1
|
update format
|
2019-07-26 20:45:08 +01:00 |
|
|
NickTyrer
|
a329e36918
|
add evasion module applocker_evasion_msbuild
|
2019-07-26 20:16:29 +01:00 |
|
|
Wei Chen
|
261759da11
|
Cosmetic changes
|
2019-07-23 13:28:15 -05:00 |
|
|
NickTyrer
|
791da38fe4
|
update instructions
|
2019-06-16 11:39:03 +01:00 |
|
|
NickTyrer
|
b7137ea426
|
update module flow
|
2019-06-15 20:03:17 +01:00 |
|
|
NickTyrer
|
46ebae8231
|
implemented rubocop suggestions
|
2019-06-15 11:06:38 +01:00 |
|
|
NickTyrer
|
45db30bd90
|
increase randomness to avoid duplicates
|
2019-06-07 15:02:47 +01:00 |
|
|
NickTyrer
|
4a359f5f5e
|
format
|
2019-05-27 21:19:10 +01:00 |
|
|
NickTyrer
|
894d817fd1
|
updated instructions function
|
2019-05-27 16:58:16 +01:00 |
|
|
NickTyrer
|
ab20c24340
|
fix setting mod variables
|
2019-05-27 16:34:53 +01:00 |
|
|
NickTyrer
|
b7221a65a1
|
addressed issues raised by @cbrnrd
|
2019-05-26 22:18:43 +01:00 |
|
|
NickTyrer
|
f6eeb7b4b1
|
fix typo
|
2019-05-23 20:35:29 +01:00 |
|
|
NickTyrer
|
9a6d56a8de
|
fix typo
|
2019-05-23 20:29:11 +01:00 |
|
|
NickTyrer
|
f023fb9525
|
add further obfuscation
|
2019-05-02 08:39:35 +01:00 |
|
|
NickTyrer
|
38256a18bd
|
added further obfuscation to module
|
2019-05-01 17:05:40 +01:00 |
|
|
NickTyrer
|
ee7ef7ad4e
|
fix typo
|
2019-04-29 22:23:49 +01:00 |
|
|
Mike Menasi
|
487714b98e
|
add new evasion module applocker_evasion_install_util
|
2019-04-29 21:34:56 +01:00 |
|
|
amaloteaux
|
f8ad47d475
|
improve windows_defender_js_hta :
-add platform detection for jsc
-prevent cmd prompt when launching jsc
|
2018-10-11 17:38:47 +02:00 |
|
|
Wei Chen
|
5951f5724e
|
Pass msftidy
|
2018-10-06 16:04:07 -05:00 |
|
|
Wei Chen
|
7c1fbf2c5a
|
Update description
|
2018-10-06 09:22:35 -05:00 |
|
|
Wei Chen
|
a25a7086b2
|
Rename file
|
2018-10-06 09:20:15 -05:00 |
|
|
space-r7
|
a0052c7f47
|
Add evasion module using HTA + JavaScript + C#
|
2018-10-01 12:57:05 -05:00 |
|
|
Wei Chen
|
c68f900330
|
Update module
|
2018-09-18 18:28:23 -05:00 |
|
|
Wei Chen
|
1f16052988
|
Make key random and fix RPC
|
2018-09-05 15:09:47 -05:00 |
|