S12cybersecurity

WinDefenderKiller. Windows Defender Killer | Registry-Based Disablement + BYOVD Process Termination (C++)

RDPCredentialStealer. RDPCredentialStealer it's an implant that steal credentials provided by users in RDP using API Hooking with Detours in C++

GhostShell. Interactive shell to execute commands anonymously using Proxychains and Tor

RedNeuron. RedNeuron - Framework Creator of Malware focused in attacking Windows but created to execute framework in Linux 👾

S12URootkit. User Mode Windows Rootkit

NinjaInjector. Classic Process Injection with Memory Evasion Techniques implemantation

Admin2Sys. A Windows token-theft utility that enumerates SYSTEM processes, duplicates their access token, and spawns a new process running as NT AUTHORITY\SYSTEM.

LokiRAT. Multi-component Remote Access Trojan: C++ client (victim), C# server, and Angular frontend.

ShadowByte-Botnet. Complete Botnet Infrastucture with Malicious C&C Server And Malware Agents to infect Windows OS

NtUnhook. Selective In-Memory Syscall Unhooking, a stealthy method to bypass user-mode hooks in ntdll.dll

HTTP_POST-Login-BruteForce. HTTP_POST Login BruteForce

DumpLsass. C++ Code to perform a MiniDump of lsass.exe

RatInject. Rat Inject is C++ Executable to gain Undetectable Persistence in Windows via 4 Registry Keys

ETWEvasionToolkit. Toolkit of Projects to attack and evade Event Trace for Windows

RansomwareS12. Simple Ransoware to attack Windows 🌟 

MalDev-Lib. Malware Libraries focused in help Malware Development

AD-Pentest. Pentesting Tools to Automatize Active Directory Hacking

PrivilegeEscalationClass. C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin

ThreadHijacking. Threat Hijacking Simple Implementation

bypass_magic_bytes. Bypassing File Upload Restriction using Magic Bytes

Automatic-Blind-SQL-Injection. Automate Blind SQL Injection with Python.

GhostlyHollowingCrypter. Advanced in-memory process injection using transient SEC_IMAGE sections, custom crypter, and ADS payload delivery no disk traces, maximum stealth.

CTF-s. Github repository with Write Up, AutoPwn, Tools, Videos of CTF's from HackTheBox and TryHackMe

WindowInjector. Linux Malware creator to attack Windows System via Reverse Shell with FindWindow Process Code Injection

Backdoor. The best Python Backdoor👌

PDFTypeSpoofing. PDF Icon File Type Spoofer

Infinite-Backdoors. Bash Script with 4 ways to get persistence in Linux systems WITHOUT root permisions

FreeThreadHijacking. Perform Thread Hijacking Shellcode Injection without OpenProcess and OpenThread mapping all the free handles in memory

LFI-Paradise. Local File Inclusion Scanner and Exploiter

Broke-Login. Simple Python Modular Script to Broke Web Logins

AntiVM. C++ Class with various techniques to detect the execution in a virtualized environment

Scanner_Port. Easy Port Scanner with Python

MySQL-DataStealer. Post-Exploitation Tool to Steal MySQL Data, and with persistence extract all data from MySQL table every time that Windows are opened with a Server to receive the extracted Files

Pivoting_Enum. Automate All Pivoting System Enumeration with this Bash Script

rfi_paradise. Python Scanner and Exploiter of Remote File Inclusion Vulnerabilitie

FTP-Sniffer. MITM to Capture FTP Credentials

AntiDebugging. Anti Debugging C++ Class

Reverse-Shell-C-PlusPlus. Simple C++ Reverse Shell

RemoteFunctionPatcher. Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the target function will be exited automatically all the times called by this process

FileExtractor. C++ Code to Extract Windows File and Receive in Linux Machine

virus_downloader. Easy Python virus framework

KernelProcessesTerminator. Terminate Processes from a Kernel Driver receiving the process to kill via simple userland application

ReverseShell-Creator. Very basic Web created with HTML and JavaScript to create Online Payload to do Reverse Shells

pentweb. Bash script that creates directories and files to organize a pentesting

ThreadCallStackSpoofer. Call Stack Spoofer, a Windows-based tool that allows modifying the call stack of a suspended thread. It takes a list of memory addresses as arguments and writes them into the stack

FileHider. C++ Implementation to Hide File in ADS with the option of Encrpytion + Fragmentation

MapFreeMemoryHandles. Find all type of handles free in Windows Memory

VirtualAlloc-Implementation. My Own VirtualAlloc Implementation to use as alternative unknown for all the defense solutions of VirtualAlloc Win32 API Function

KeyloggerS12. C++ keylogger to save all the keys pressed into a local txt file

AMSIPatching. C++ Code to Patch AMSI in Remote Processes

ProcList. C++ Script to list active processes with name, PID, Parent PID and User running it

AdminX. AdminX it's a Malware to execute process as some users from a Windows OS

ResurrectedMalware. Malware Implant to Simulate various Resurretion Techniques

ShellcodeCrypterVSExtension. ShellcodeCrypterVSExtension is a Visual Studio extension that provides a simple XORand AES-based encryption and decryption tool. It allows developers to encrypt shellcode using a key. This extension is designed to integrate seamlessly into Visual Studio, making shellcode manipulation easier.

KernelEventMonitor. Monitoring Process Creation/Termination, Thread Creation/Termination and Image Load Notifications from a Kernel Driver

StringCrypter. Repository with the necessary implementation to encrypt strings for our implants

BruteSSH. SSH Bruteforce Basic Script created with C++ to Linux

StringCrypterVSExtension. Visual Studio Extension - String Crypter Project

HideProcessesDKOM. Taking advantatge of Direct Kernel Object Manipulation to hide process from the EPROCESS structure

SecurityDetox. Detect and Delete Security Products