FatCyclone

FatCyclone's Stars

• awesome-selfhosted/awesome-selfhosted

  A list of Free Software network services and web applications which can be hosted on your own servers

  211k2.7k80310k

• BeichenDream/GodPotato

  Language:C#1.8k1013226

• Idov31/Nidhogg

  Nidhogg is an all-in-one simple to use windows kernel rootkit.

  Language:C++1.8k3616278

• threatexpress/malleable-c2

  Cobalt Strike Malleable C2 Design and Reference Guide

  1.6k4213298

• paranoidninja/CarbonCopy

  A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

  Language:Python1.3k5514282

• ZeroMemoryEx/Terminator

  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

  Language:C++9361910155

• JLospinoso/gargoyle

  A memory scanning evasion technique

  Language:C++848295115

• chvancooten/NimPlant

  A light-weight first-stage C2 implant written in Nim (and Rust).

  Language:Rust8171322109

• CCob/ThreadlessInject

  Threadless Process Injection using remote function hooking.

  Language:C#73511084

• Cracked5pider/Ekko

  Sleep Obfuscation

  Language:C705141103

• klezVirus/CheeseTools

  Self-developed tools for Lateral Movement/Code Execution

  Language:C#694231141

• zodiacon/windowskernelprogrammingbook

  The Windows Kernel Programming book samples

  Language:C++616206127

• ZeroMemoryEx/Amsi-Killer

  Lifetime AMSI bypass

  Language:C++6099492

• AlmondOffSec/PassTheCert

  Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

  Language:C#58781773

• Idov31/Cronos

  PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

  Language:C56810263

• namazso/MagicSigner

  Signtool for expired certificates

  Language:C++46315151

• zblurx/dploot

  DPAPI looting remotely and locally in Python

  Language:Python43371456

• thefLink/DeepSleep

  A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

  Language:C3529156

• waldo-irc/YouMayPasser

  You shall pass

  Language:PowerShell25010051

• S12cybersecurity/RDPCredentialStealer

  RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++

  Language:C++2388137

• rad9800/hwbp4mw

  Language:C++2234050

• tothi/serviceDetector

  Detect whether a service is installed (blindly) and/or running (if exposing named pipes) on a remote machine without using local admin privileges.

  Language:Python2185124

• codewhitesec/Lastenzug

  Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

  Language:Go2133131

• xalicex/Killers

  Exploitation of process killer drivers

  Language:C1938223

• Semperis/GoldenGMSA

  GolenGMSA tool for working with GMSA passwords

  Language:C#1373221

• CymulateResearch/Blindside

  Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms

  Language:C++1144118

• 0xthirteen/AssemblyHunter

  Find .net assemblies locally

  Language:C#954119

• xalicex/LOLDrivers_finder

  Language:Python732010

• zyn3rgy/ClickonceHunter

  Golang search engine scraper intended for identification of published ClickOnce deployments

  Language:Go69307

• tothi/malicious-service

  Minimal Windows Service Template for demonstrating privilege escalation via weak service executable permissions

  Language:C13305