
WPTaskScheduler_CVE-2024-49039
WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler

Better Remote Access Trojan

Generate a proxy dll for arbitrary dll

Youtube as C2 channel - Control Windows systems uploading QR videos to Youtube

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

C++

some python3 functions to add spreading features to any python backdoor

Learning FreeBSD Kernel Hacking - Exercises

Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harvesting

A host based IDS written in C# Targetted at Metasploit

Repository hosting a hypothetical EDR Spoofer, as discovered originally by Nightmare-Eclipse


EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

njRAT C# Stub - Fixed For PowerShell

This is a proof-of-work for abusing "fsmonitor" against IDE.