Winslow

EDRPrison. Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

MutationGate. Use hardware breakpoint to dynamically change SSN in run-time

psexec_noinstall. Repository contains psexec, which will help to exploit the forgotten pipe

Offsec-Certification-Resources. Learning resources and external resources to help you prepare for your offsec certifications

InflativeLoading. Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

GraphStrike. Cobalt Strike HTTPS beaconing over Microsoft Graph API

noVNC_Kiosk. VNC client web application

micr0_shell. micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

Amsi_Bypass_In_2023. Amsi Bypass payload that works on Windwos 11

Windows_x64_Tcp_Reverse_Shell_Shellcode. Null-free shellcode for TCP reverse shell on Windows x64

Windows_x64_Calc_Shellcode. Null-free shellcode for running calc.exe on Windows x64

Pentest-Tools.

SharpBeacon. CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

OSEP-Code-Snippets. A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.