elephacking

officedump. Dump document encryption password from Office process memory

certdump. Beacon Object File (BOF) for dumping certificates (and, when possible, private keys) on Windows

ld_library. Load dll library to process during process creation utilizing Early Bird APC Queue Code Injection on Windows

br-notifier. BruteRatel webhook integration with Slack and Email

RDP-keepalive. Sending simulated mouse moving event to virtual workspace to keep session alive