seahop
Red Teamer. Just out here creating some simple PoCs for red teamy things. Amateur coder. No best practices here.
United States
Pinned Repositories
CPP_XOR
getPIDIntegrity
Injection
mimiRust
All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
patchETW
Function to patch ETW with syscalls
RemoteProcDLLInject
RemoteShellcodeInjection_XOR
SyscallProcScan
Syscall process scanner
titan
Titan: A generic user defined reflective DLL for Cobalt Strike
seahop's Repositories
seahop/talks
seahop/AzureGoat
AzureGoat : A Damn Vulnerable Azure Infrastructure
seahop/EDRSandblast
seahop/mimiRust
All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
seahop/Burp2Malleable
Quick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
seahop/iscsicpl_bypassUAC
UAC bypass for x64 Windows 7 - 11
seahop/Koh
The Token Stealer
seahop/G0T-B0R3D
A bunch of code and scripts I wrote because I was bored.
seahop/Blackbone
Windows memory hacking library
seahop/metatwin
The project is designed as a file resource cloner. Metadata, including digital signature, is extracted from one file and injected into another.
seahop/NtCreateUserProcess
Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html
seahop/bof_helper
Beacon Object File (BOF) Creation Helper
seahop/forward-dll
DLL 转发工具方法。
seahop/dllexical
easy dll proxying in go
seahop/Awesome-macOS-Red-Teaming
List of Awesome macOS Red Teaming Resources.
seahop/most-average-c2-ever
The most average C2 ever (MACE)
seahop/patchETW
Function to patch ETW with syscalls
seahop/NtDllPipeRead
Opens 2 named pipes and uses cmd.exe to read in the contents of ntdll.dll between pipes. Tweaked the code from x86matthew's site https://www.x86matthew.com and fixed up a little to work in C.
seahop/User-Behavior-Mapping-Tool
seahop/getPIDIntegrity
seahop/SyscallProcScan
Syscall process scanner
seahop/ServiceMove-BOF
New lateral movement technique by abusing Windows Perception Simulation Service to achieve DLL hijacking code execution.
seahop/windows-dll-hijacking
Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.
seahop/RecycledGate
Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
seahop/trevorc2
TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.
seahop/inject-assembly
Inject .NET assemblies into an existing process
seahop/ParallelSyscalls
seahop/koadic
zerosum0x0's Koadic
seahop/ArtifactKit
seahop/WindowsExploitationResources
Resources for Windows exploit development