seahop
Red Teamer. Just out here creating some simple PoCs for red teamy things. Amateur coder. No best practices here.
United States
Pinned Repositories
CPP_XOR
getPIDIntegrity
Injection
mimiRust
All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
patchETW
Function to patch ETW with syscalls
RemoteProcDLLInject
RemoteShellcodeInjection_XOR
SyscallProcScan
Syscall process scanner
titan
Titan: A generic user defined reflective DLL for Cobalt Strike
seahop's Repositories
seahop/pyXOR_Bin
seahop/XOR_EncodeDecode
Basic XOR function in CPP
seahop/DLLProxy_Example1
DLL proxy example for notepad++ updater libcurl.dll. In this instance, must rename the original libcurl.dll to libcurl1.dll so forwarding happens properly.
seahop/VX-API
Collection of various WINAPI tricks / features used or abused by Malware
seahop/inno-shellcode-example
Run shellcode through InnoSetup code engine.
seahop/Ninja_UUID_Runner
Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
seahop/go-shellcode
A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
seahop/CertStealer
A .NET tool for exporting and importing certificates without touching disk.
seahop/macOS-Exploit-Dev-OSMR
Resources, scripts, and overviews of the knowledge I collect going through Offensive Security's macOS Exploit Development course.
seahop/CandyPotato
Pure C++, weaponized, fully automated implementation of RottenPotatoNG
seahop/PyPortScan_PerIface
seahop/RemoteProcDLLInject
seahop/RemoteShellcodeInjection_XOR
seahop/CPP_XOR
seahop/GDir-Thief
Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.
seahop/GD-Thief
Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.
seahop/LiquidSnake
LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript
seahop/Injection
seahop/AggressorScripts
seahop/Microsoft365_devicePhish
A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow
seahop/GadgetToJScript
A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
seahop/Crescendo
Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.
seahop/gitrob
Reconnaissance tool for GitHub organizations
seahop/UAC-SilentClean
New UAC bypass for Silent Cleanup for CobaltStrike
seahop/AllTheThingsExec
Executes Blended Managed/Unmanged Exports
seahop/HellsGate
Original C Implementation of the Hell's Gate VX Technique
seahop/DInvoke
Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.
seahop/RunPE
C# Reflective loader for unmanaged binaries.
seahop/dnscan
seahop/ThreatCheck
Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.