trickster0

Lead Red Teamer & Malware Dev, Reverse engineering for fun and analyzing Winternals

Greece

Pinned Repositories

CReadMemory
Read Memory without ReadProcessMemory for Current Process
Language:C++75 7 017
EDR_Detector
EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.
Language:Rust92 5 015
Enyx
Enyx SNMP IPv6 Enumeration Tool
Language:Python102 8 321
LdrLoadDll-Unhooking
LdrLoadDll Unhooking
Language:C++121 9 022
Lenum
Linux Enumeration / Privilege escalation tool
Language:Rust22 3 05
NamelessC2
Nameless C2 - A C2 with all its components written in Rust
Language:Rust247 2 031
OffensiveRust
Rust Weaponization for Red Team Engagements.
Language:Rust2.7k 45 7308
RedLizard
RedLizard Rust TCP Reverse Shell Server/Client
Language:Rust132 4 027
TartarusGate
TartarusGate, Bypassing EDRs
Language:C548 13 165
UDPlant
UDP implant
Language:Rust64 5 016

trickster0's Repositories

trickster0/OffensiveRust
Rust Weaponization for Red Team Engagements.
Language:Rust2.7k 45 7308
trickster0/NamelessC2
Nameless C2 - A C2 with all its components written in Rust
Language:Rust247 2 031
trickster0/RedLizard
RedLizard Rust TCP Reverse Shell Server/Client
Language:Rust132 4 027
trickster0/BlackLotus
BlackLotus UEFI Windows Bootkit
Language:C3 1 0
trickster0/CursedChrome
Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.
3
trickster0/LdrLockLiberator
For when DLLMain is the only way
Language:C2 1 0
trickster0/Veil
Windows internal undocumented API.
Language:C2 1 0
trickster0/azure-hunting
Collection of hunting resources for Microsoft Azure
Language:PowerShell1 1 0
trickster0/azurehound-queries
Collection of BloodHound queries for Azure
1 0 0
trickster0/clr-thing
rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.
Language:C1 1 0
trickster0/CTF
Repo for storing CTF related stuff (Writeups, etc.)
1
trickster0/doublepulsar-rdp
Another unfinished doublepulsar RDP variant from years ago. Demonstrates hooking McsDispatch, never wrote the hook itself
Language:C1 1 0
trickster0/GraphSpy
Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI
Language:HTML1 0 0
trickster0/lib-nosa
ViperX Research Labs
Language:HTML1 0 0
trickster0/minhook
The Minimalistic x86/x64 API Hooking Library for Windows
Language:C1 0 0
trickster0/Periscope
1
trickster0/Rustic64
64-bit, position-independent implant template for Windows in Rust.
Language:Rust1 0 0
trickster0/Stardust
An modern 64-bit position independent implant template
Language:C1 1 0
trickster0/AlanFramework
A C2 post-exploitation framework
Language:Assembly
trickster0/aws-inventory
Discover resources created in an AWS account.
trickster0/clroxide
A rust library that allows you to host the CLR and execute dotnet binaries.
Language:Rust1 0
trickster0/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual.
Language:C0 0
trickster0/PSXecute
32bit MIPS I VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
Language:C++0 0
trickster0/RedEdr
Collect Windows telemetry for Maldev
Language:C++0 0
trickster0/riscy-business
RISC-V Virtual Machine
trickster0/rpc-svc
A simple RPC client and server running as a service. Project demonstrating client, server, and IDL file development. Based on Windows Sample
Language:C1 0
trickster0/shadow-workers
Shadow Workers is a free and open source C2 and proxy designed for penetration testers to help in the exploitation of XSS and malicious Service Workers (SW)
Language:JavaScript
trickster0/shrk
LKM rootkit for modern kernels, with DNS C2 and a simple web interface
trickster0/Stinger
CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.
Language:C++0 0
trickster0/wstunnel
Tunnel all your traffic over websocket protocol - Bypass firewalls/DPI - Static binary available
Language:Rust1 0