Pinned Repositories
ActiveDirectoryServices
A more full featured C# API for connecting to and managing Active Directory (AD) and Lightweight Directory (AD-LDS) instances, complete with consumer application examples.
AntiDebug
PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
CSExec
An implementation of PSExec in C#
DnsCache
ManagedInjection
A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
NamedPipes
A pattern for client/server communication via Named Pipes via C#
UnstoppableService
A pattern for a self-installing Windows service in C# with the unstoppable attributes in C#.
WcfScan
A tool for scanning NET.TCP WCF endpoints to test the security of their binding configurations.
WidgetSender
Intentionally Vulnerable Demo App: .NET MVC, WCF, WebAPI, Web Forms
WMIProcessWatcher
An example pattern in C# for using WMI to monitor process creation and termination events.
malcomvetter's Repositories
malcomvetter/Periscope
Fully Integrated Adversarial Operations Toolkit (C2, stagers, agents, ephemeral infrastructure, phishing engine, and automation)
malcomvetter/CSExec
An implementation of PSExec in C#
malcomvetter/NamedPipes
A pattern for client/server communication via Named Pipes via C#
malcomvetter/UnstoppableService
A pattern for a self-installing Windows service in C# with the unstoppable attributes in C#.
malcomvetter/fake-ransomware
A non-destructive, but ANNOYING ransomware lookalike for use with red team exercises.
malcomvetter/WMIProcessWatcher
An example pattern in C# for using WMI to monitor process creation and termination events.
malcomvetter/DnsCache
malcomvetter/AntiDebug
PoC: Prevent a debugger from attaching to managed .NET processes via a watcher process code pattern.
malcomvetter/WidgetSender
Intentionally Vulnerable Demo App: .NET MVC, WCF, WebAPI, Web Forms
malcomvetter/ChromePasswords
malcomvetter/WhoDis
An example pattern in C# for watching security events (logon/logoff/privilege)
malcomvetter/RunAs
An example in C# for programmatically calling UAC to escalate to admin
malcomvetter/CertCheck
Programmatically access a TLS certificate chain in C++ and C#
malcomvetter/TLAD
The Totally Legit Authentication Dialog
malcomvetter/DieHard
PoC: process watcher patterns to make killing a process hard.
malcomvetter/ProtectProcessFromJoeUser
PoC: Protecting Joe User from killing his own process.
malcomvetter/Trojan-RetailDiagnostics
malcomvetter/SpoofParentProcess
malcomvetter/CAPE
Malware Configuration And Payload Extraction
malcomvetter/netstat
malcomvetter/taskkill
malcomvetter/WindowsSessions
malcomvetter/dns
A DNS library written in C#
malcomvetter/HappySad
Sometimes you just need a Happy EXE and a Sad EXE
malcomvetter/OpenAutoruns
:shield: An open-source Windows autoruns viewer, as a course project (SJTU-IS405).
malcomvetter/screenshot
malcomvetter/SunburstStrings
malcomvetter/NetAPI
Example for how to call the NetAPI for local user/group management in Windows via C++
malcomvetter/sha256
Example C# pattern for generating sha256 hashes
malcomvetter/XOREncryption
XOR encryption implementations for several languages.