Popular repositories Loading

1. Dirty-Vanity Dirty-Vanity Public

   A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass…

   C 673 89

2. LsassSilentProcessExit LsassSilentProcessExit Public

   Command line interface to dump LSASS memory to disk via SilentProcessExit

   C++ 455 63

3. Lsass-Shtinkering Lsass-Shtinkering Public

   C++ 385 44

4. DCOMUploadExec DCOMUploadExec Public

   DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely

   C++ 380 53

5. ContainYourself ContainYourself Public

   A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.

   C++ 319 42

6. NoFilter NoFilter Public

   C 301 48