trickster0

OffensiveRust. Rust Weaponization for Red Team Engagements.

TartarusGate. TartarusGate, Bypassing EDRs

NamelessC2. Nameless C2 - A C2 with all its components written in Rust

RedLizard. RedLizard Rust TCP Reverse Shell Server/Client

LdrLoadDll-Unhooking. LdrLoadDll Unhooking

Enyx. Enyx SNMP IPv6 Enumeration Tool

EDR_Detector. EDR Detector that can find what kind of endpoint solution is being used according to drivers in the system.

CReadMemory. Read Memory without ReadProcessMemory for Current Process

UDPlant. UDP implant

PrimitiveInjection. PrimitiveInjection by using Read, Write and Allocation Primitives.

Lenum. Linux Enumeration / Privilege escalation tool

Brave_Browser_1Day_POC. This is a crash for Brave Browser I found in New Years Eve, used to be a 0day when I found it

Elastic_Panel_AutoInstall. Spawn Up quickly Elastic EDR Panel

BlindBrowse. Android BlindBrowser : Real Time Navigation on Android devices with no display.

BlackLotus. BlackLotus UEFI Windows Bootkit

CursedChrome. Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

ghost. A sample client/server architecture

LdrLockLiberator. For when DLLMain is the only way

Obfuscator. A program for obfuscating C strings

Stinger. CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.

Rustic64. 64-bit, position-independent implant template for Windows in Rust.

lib-nosa. ViperX Research Labs

PSBits. Simple (relatively) things allowing you to dig a bit deeper than usual.

ntoskrnl. The Windows Research Kernel (WRK)

shrk. LKM rootkit for modern kernels, with DNS C2 and a simple web interface

Veil. Windows internal undocumented API.

Chrome-App-Bound-Encryption-Decryption. Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin rights required.

minhook. The Minimalistic x86/x64 API Hooking Library for Windows

clr-thing. rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.

Stardust. An modern 64-bit position independent implant template

azure-hunting. Collection of hunting resources for Microsoft Azure

doublepulsar-rdp. Another unfinished doublepulsar RDP variant from years ago. Demonstrates hooking McsDispatch, never wrote the hook itself

CTF. Repo for storing CTF related stuff (Writeups, etc.)

GraphSpy. Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

azurehound-queries. Collection of BloodHound queries for Azure

MicrosoftWontFixList. A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

Ox-C2. Command & Control server and agent written in Rust

socker. Checks SOCKS Proxy List To find Working Proxies

RedEdr. Collect Windows telemetry for Maldev

ReflectiveLoader. A Reflective Loader for macOS

AlanFramework. A C2 post-exploitation framework

WinVisor. WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API

container_sec_workstation. Shell

Lastenzug. Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

clroxide. A rust library that allows you to host the CLR and execute dotnet binaries.

MemFiles. A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

PPID-Spoofing. POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritting ntdll:LdrInitializeThunk with shellcode.

ShimMe. C++

bootdoor. Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE