elp4tr0n

Expert
@3lp4tr0n

Offensive Security

BeaconHunter. Detect and respond to Cobalt Strike beacons using ETW.

515

SessionHop. Windows Session Hijacking via COM

348

RemoteMonologue. Weaponizing DCOM for NTLM Authentication Coercions

214

CVE-2023-27470_Exercise. C++

11

WMImplant. This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

3

GodPotato. C#

3

Screenshottery. Simple spyware that takes screenshots on target computer every "x" amount of seconds.

2

Alaris. A protective and Low Level Shellcode Loader the defeats modern EDR systems.

1

BlockEtw. .Net Assembly to block ETW telemetry in current process

1
9
Apply