Pinned Repositories
AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
Amsi-Go
AmsiHooker
Hookers are cooler than patches.
Apuntes
AQUARMOURY
My musings in C and offensive tooling
SharpShooter
Payload Generation Framework
Insideus's Repositories
Insideus/Amsi-Go
Insideus/AmsiHooker
Hookers are cooler than patches.
Insideus/capsulecorp-pentest
Vagrant VirtualBox environment for conducting an internal network penetration test
Insideus/commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com
Insideus/EDRs
Insideus/garble
Obfuscate Go builds
Insideus/gost
GO Simple Tunnel - a simple tunnel written in golang
Insideus/HelpColor
Agressor script that lists available Cobalt Strike beacon commands and colors them based on their type
Insideus/HOLLOW
EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode
Insideus/InlineWhispers2
Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2
Insideus/InstallerFileTakeOver
Insideus/Invoke-DLLClone
Koppeling x Metatwin x LazySign
Insideus/jadx
Dex to Java decompiler
Insideus/JNDI-Injection-Exploit
JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
Insideus/JustEvadeBro
JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
Insideus/LazySign
Create fake certs for binaries using windows binaries and the power of bat files
Insideus/OffensiveNim
My experiments in weaponizing Nim (https://nim-lang.org/)
Insideus/OffensiveVBA
This repo covers some code execution and AV Evasion methods for Macros in Office documents
Insideus/ParallelSyscalls
C# version of MDSec's ParallelSyscalls
Insideus/pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Insideus/red_team_attack_lab
Red Team Attack Lab for TTP testing & research
Insideus/redsocks
transparent TCP-to-proxy redirector
Insideus/RTOVMSetup
Insideus/sam-the-admin
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Insideus/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
Insideus/SharpGhosting
Process Ghosting in C#
Insideus/SharpNoPSExec
Get file less command execution for lateral movement.
Insideus/tgtdelegation
tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"
Insideus/unhook-bof
Remove API hooks from a Beacon process.
Insideus/Whisker
Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.