John Tear

Shellcode-Encryptor. A simple shell code encryptor/decryptor/executor to bypass anti virus.

Shellcode-Injection-Techniques. A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

Suspended-Thread-Injection. Another meterpreter injection technique using C# that attempts to bypass Defender

SandboxDefender. C# code to Sandbox Defender (and most probably other AV/EDRs).

Sys-Calls. An example of using Syscalls in C# to get a meterpreter shell.

Peruns-Fart. Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.

CmdLineSpoofer. How to spoof the command line when spawning a new process from C#.

Unhook-BitDefender. Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.

ps-encoder. A very simple python script to encode and decode PowerShell one-liners.

AMSI-Bypass. Another AMSI bypass - but in C++.

PowerGhost. A custom run space to bypass AMSI and Constrained Language mode in PowerShell.

Malicious-KeePass-Plugin. A malicious KeePass plugin to exfiltrate the master key.

DynamicEarlyBird. An example of using Dynamic Invoke to Inject Shellcode using the Early Bird Method.

misc-scripts. Miscellaneous Scripts

LsassDump. Simple C# Program to dump LSASS

OffensiveVBA. This repo covers some code execution and AV Evasion methods for Macros in Office documents

Enumeration. Some .Net assemblies used to enumerate a host. Best when they are loaded in to memory.

plackyhacker.github.io. C++

HEVD. My exploits for the HackSys Vulnerable Driver Project

impersonator. C++ code to impersonate a Windows token and spawn a new process.

SecureCode1. Python exploit for the VulnHub OSWE practice box 'SecureCode1'

Bash-Port-Scanner. A simple bash TCP port scanner

passwordgenerator. Generate three random word password lists quickly

Sliver-Extension-Template. A Sliver Extension Template

SharpCall. Simple PoC demonstrating syscall execution in C#

msgbox. Host a non-malicious shellcode

Evilginx3-Phishlets. This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3.

Azure-Sentinel. Cloud-native SIEM for intelligent security analytics for your entire enterprise.

AnalyseDriver. A basic driver analysis tool for BinaryNinja, finds common information to speed up the process.

php-reverse-shell. PHP