seahop
Red Teamer. Just out here creating some simple PoCs for red teamy things. Amateur coder. No best practices here.
United States
Pinned Repositories
CPP_XOR
getPIDIntegrity
Injection
mimiRust
All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
patchETW
Function to patch ETW with syscalls
RemoteProcDLLInject
RemoteShellcodeInjection_XOR
SyscallProcScan
Syscall process scanner
titan
Titan: A generic user defined reflective DLL for Cobalt Strike
seahop's Repositories
seahop/SysmonEoP
seahop/BumbleCrypt
A Bumblebee-inspired Crypter
seahop/NimDllSideload
DLL sideloading/proxying with Nim!
seahop/PrintNotifyPotato
PrintNotifyPotato
seahop/ransomwhere
A PoC ransomware sample to test out your ransomware response strategy.
seahop/DynamicWrapperEx
x64 Registration-Free In-Process COM Automation Server.
seahop/mimikatz-rs
Rusty Mimikatz - All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)
seahop/misc
miscellaneous scripts and programs
seahop/titan
Titan: A generic user defined reflective DLL for Cobalt Strike
seahop/BrokenFlow
A simple PoC to invoke an encrypted shellcode by using an hidden call
seahop/whids
Open Source EDR for Windows
seahop/DynamicSyscalls
DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
seahop/ProcessHide
seahop/MoreImpacketExamples
More examples using the Impacket library designed for learning purposes.
seahop/HellsGate-with-no-gate-and-dinvoking-deez
title. a monstrosity that combines some dinvoke and some hellsgate cuz why not even if theyre similar
seahop/psudohash
Password list generator that focuses on keywords mutated by commonly used password creation patterns
seahop/IORI_Loader
UUID shellcode Loader with dynamic indirect syscall implementation, syscall number/instruction get resolved dynamicaly at runtime, and the syscall number/instruction get unhooked using Halosgate technique. Function address get resolved from the PEB by offsets and comparaison by hashes
seahop/DllProxy-rs
Rust Implementation of SharpDllProxy for DLL Proxying Technique
seahop/ExecRemoteAssembly
Execute Remote Assembly with args passing and with AMSI and ETW patching
seahop/Inveigh
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
seahop/AtomPePacker
A Highly capable Pe Packer
seahop/sideloadr
Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).
seahop/Amaterasu
Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Process Explorer driver to kill a process's handles from kernel mode.
seahop/airstrike
seahop/DumpThatLSASS
Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.
seahop/ManualRsrcDataFetching
Get your data from the resource section manually, with no need for windows apis
seahop/JuicyPotatoNG
Another Windows Local Privilege Escalation from Service Account to System
seahop/0xsp.com
seahop/cloudfox
Automating situational awareness for cloud penetration tests.
seahop/Modules
Modules used by the Havoc Framework