FatCyclone

FatCyclone's Stars

• reHackable/awesome-reMarkable

  A curated list of projects related to the reMarkable tablet

  6.4k26639215

• s0md3v/Arjun

  HTTP parameter discovery suite.

  Language:Python5.4k87149803

• stephenfewer/ReflectiveDLLInjection

  Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

  Language:C2.8k12815780

• assetnote/kiterunner

  Contextual Content Discovery Tool

  Language:Go2.7k3948304

• lefayjey/linWinPwn

  linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

  Language:Shell1.8k2726270

• Mr-Un1k0d3r/SCShell

  Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

  Language:C1.4k295242

• t3l3machus/psudohash

  Generates millions of keyword-based password mutations in seconds.

  Language:Python1.2k216156

• WKL-Sec/HiddenDesktop

  HVNC for Cobalt Strike

  Language:C1.2k155184

• lem0nSec/ShellGhost

  A memory-based evasion technique which makes shellcode invisible from process start to end.

  Language:C1.2k93142

• Octoberfest7/TeamsPhisher

  Send phishing messages and attachments to Microsoft Teams users

  Language:Python1k1027130

• Aetsu/OffensivePipeline

  OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

  Language:C#796199147

• itm4n/VBA-RunPE

  A VBA implementation of the RunPE technique or how to bypass application whitelisting.

  Language:VBA792288179

• reveng007/DarkWidow

  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

  Language:C60912180

• juliourena/SharpNoPSExec

  Get file less command execution for lateral movement.

  Language:C#60612187

• WinMin/awesome-vm-exploit

  share some useful archives about vm and qemu escape exploit.

  53220075

• rad9800/TamperingSyscalls

  Language:C++46511172

• senzee1984/Amsi_Bypass_In_2023

  Amsi Bypass payload that works on Windwos 11

  Language:PowerShell3723067

• f1zm0/hades

  Go shellcode loader that combines multiple evasion techniques

  Language:Go3578146

• crummie5/FreshyCalls

  FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!

  Language:C++3176736

• f1zm0/acheron

  indirect syscalls for AV/EDR evasion in Go assembly

  Language:Assembly3146336

• slemire/WSPCoerce

  PoC to coerce authentication from Windows hosts using MS-WSP

  Language:C#2282031

• Idov31/Jormungandr

  Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

  Language:C++2267025

• XaFF-XaFF/Kernel-Process-Hollowing

  Windows x64 kernel mode rootkit process hollowing POC.

  Language:C++1844025

• nazywam/AutoIt-Ripper

  Extract AutoIt scripts embedded in PE binaries

  Language:Python176101535

• fortra/CVE-2023-28252

  Language:C1732047

• nov1n/RemarkablePocket

  Synchronize Pocket articles with the Remarkable tablet.

  Language:Java1475259

• mansk1es/GhostFart

  Language:C++1341121

• Signal-Labs/iat_unhook_sample

  (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls and all hooked functions (incl. hooked NtProtectVirtualMemory)

  Language:Rust1294018

• stolenusername/cowitness

  CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.

  Language:Go1232319

• Marc-andreLabonte/AnalyseDynamiqueModulesKernel

  Atelier Analyse dynamique de modules de kernel Windows NSEC 2023

  Language:Go2100