
MagicSigner
Signtool for expired certificates

Signtool for expired certificates

PrintNightmare , Local Privilege Escalation of CVE-2021-1675 or CVE-2021-34527

PE loader with various shellcode injection techniques

For when DLLMain is the only way

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具,它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码,帮助红队人员更方便快…

DLL Password Filter Implant with Exfiltration Capabilities

Remote DLL Injection with Timer-based Shellcode Execution

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post

freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package

Injects x64 managed DLLs into GUI processes via SetWindowsHook, with a modular C# payload runner and LSASS dump POC for red-team/offensive Windows…