ethicalhax

Probatorum-EDR-Userland-Hook-Checker. Project to check which Nt/Zw functions your local EDR is hooking

Silent_Chrome. This code silently installs Chrome extensions on Mac, Windows, and Linux

DoppelGate. DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userland Hooking.

Forblaze. Forblaze - A Python Mac Steganography Payload Generator

Rubicon. Caesar-Cipher based encryption

MachoBins.

String_Spy. String Spy is a project aimed at improving MacOS/Linux defenses. It allows users to constantly monitor all running processes for user-defined strings, and if it detects a process with such a string it will log the PID, process path, and user running the process. It will also (optionally) kill the process.

Guard_Comms. C2 Guard Comms code base based on Guard Pages

Generate_DLLProxy_Header. Basic script to generate proxy DLL headers for side loading tests, will likely make prettier later

CookieImporter. Chrome Extension which will let you copy and paste cookies in json format