
libprocesshider
LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.
defensive-toolsinformation-gatheringmalware-analysis+4
1.1k

LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.

C# port of the Get-AppLockerPolicy PS cmdlet

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

Powershell module to get the NetNTLMv2 hash of the current user

PowerShell-based reverse shell with background task execution, file transfer, and dual persistence mechanisms via registry and startup folder for red…