seahop

Red Teamer. Just out here creating some simple PoCs for red teamy things. Amateur coder. No best practices here.

United States

Pinned Repositories

CPP_XOR
Language:C++1 1 00
getPIDIntegrity
Language:C++1 1 01
Injection
Language:C++1 1 00
mimiRust
All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
Language:Rust2 0 00
patchETW
Function to patch ETW with syscalls
Language:C2 1 00
RemoteProcDLLInject
Language:C++1 1 00
RemoteShellcodeInjection_XOR
Language:C++1 1 00
SyscallProcScan
Syscall process scanner
Language:C++4 1 00
titan
Titan: A generic user defined reflective DLL for Cobalt Strike
Language:C75 2 049

seahop's Repositories

seahop/AMSI-ETW-Patch
Patch AMSI and ETW
Language:C#
seahop/Awesome_Malware_Techniques
This is a repository of resource about Malware techniques
seahop/CVE-2022-33679
One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html
Language:Python
seahop/TerraLdr
A Payload Loader Designed With Advanced Evasion Features
Language:C
seahop/ErebusGate
ErebusGate for Nim Bypass AV/EDR
Language:Nim
seahop/WinDbg_Scripts
Useful scripts for WinDbg using the debugger data model
Language:JavaScript
seahop/ScreenshotBOF
An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot saved to disk as a file.
Language:C
seahop/NoRunPI
Run Your Payload Without Running Your Payload
Language:C1
seahop/SideLoadingDLL
Language:C
seahop/KnownDllUnhook
Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs
Language:C
seahop/mordor-rs
Rusty Hell's Gate / Halo's Gate / Tartarus' Gate / FreshyCalls / Syswhispers2 Library
Language:Rust
seahop/fuzz.txt
Potentially dangerous files
seahop/nanorobeus
COFF file (BOF) for managing Kerberos tickets.
Language:C
seahop/Win32_Offensive_Cheatsheet
Win32 and Kernel abusing techniques for pentesters
Language:C++
seahop/Kernelhub
:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
Language:C
seahop/CodeCave
A bunch of scripts and code i wrote.
seahop/AtomicSyscall
Tools and PoCs for Windows syscall investigation.
Language:C#
seahop/PersistBOF
Language:C
seahop/SysWhispers3
SysWhispers on Steroids - AV/EDR evasion via direct system calls.
Language:Python
seahop/KrbRelay
Framework for Kerberos relaying
Language:C#
seahop/InlineWhispers2
Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2
Language:Assembly
seahop/FunctionStomping
A new shellcode injection technique. Given as C++ header or standalone Rust program.
Language:Rust
seahop/HOLLOW
EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode
Language:C
seahop/process_ghosting
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
Language:C
seahop/PrivescCheck
Privilege Escalation Enumeration Script for Windows
Language:PowerShell
seahop/PetitPotam
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
Language:C
seahop/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Language:PHP
seahop/ScareCrow
ScareCrow - Payload creation framework designed around EDR bypass.
Language:Go
seahop/pypykatz
Mimikatz implementation in pure Python
Language:Python
seahop/minidump
Python library to parse and read Microsoft minidump file format
Language:Python