Ghost-In-The-Logs

Ghost In The Logs This tool allows you to evade sysmon and windows event logging, my blog post about it can be found here Usage You can grab the lastest release here Starting off Once you've got the latest version execute it with no arguments to see the avalible commands root@kitploit: $ gitl.exe...

fortress

One browser engine to rule them all Stealth Chromium engine...

Cooolis-ms

Cooolis-ms Wiki Documentation Cooolis-ms is a code execution tool that includes a Metasploit Payload Loader, Cobalt Strike External C2 Loader, and Reflective DLL injection. It is designed to evade static detection of code we intend to execute that contains known signatures, helping red team...

VBoxCloak

VBoxCloak A PowerShell script that attempts to help malware analysts hide their VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings by at least a few points ; The script accomplishes this by doing the following: Renames several...

rebrowser-patches

🪄 Patches for undetectable browser automation This repo contains patches to enhance popular web automation libraries. Specifically, it targets the puppeteer and playwright packages. Some aspects of automation libraries or browser behavior cannot be adjusted through settings or command-line...

p3-loader

P³-Shellcode Loader - Process Parameter Poisoning Authors: Max Hirschberger & Ogulcan Ugur Contenido 1. Introducción 2. Inyección de procesos típica y APIs de sistema implicadas 3. Fundamentos técnicos de los Windows Internals necesarios 3.1 API de creación de procesos y parámetros de arranque 3....

CVE-2023-38831

CVE-2023-38831 Exploit - Generador de Archivos Cebo y Cambio Resumen Este script de Python está diseñado para generar un archivo de tipo "bait and switch" cebo y cambio. Está destinado únicamente a fines educativos y de hacking ético. Asegúrate de tener los permisos necesarios antes de utilizar...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

PSSW100AVB

⚡ PSSW100AVB ⚡ PowerShell Detection Evasion & Sandbox Research PowerShell Scripts With 100% AV Bypass PSSW100AVB Repository...

EDRSandblast

EDRSandBlast EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Notify Routine callbacks, Object Callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of...

Anti-Virus-Evading-Payloads

🚩 Anti-Virus-Evading-Payloads !CAUTION During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineerin...

Nim-Reverse-Shell

Nim Reverse Shell A simple reverse shell written in Nim that bypasses Windows Defender detection see the "Tested Operating Systems" section below for more details. This code is made for educational purposes only. Tested Operating Systems Windows 10 10.0.19045 Windows 11 10.0.22621 Compilation The...

Forensia

Forensia Herramienta Anti Forense para Red Teamers, utilizada para borrar algunas huellas en la fase de post-explotación. Reduce el desgaste de los payloads y aumenta la cuenta atrás de detección. Puede utilizarse para probar las capacidades de sus equipos de Respuesta a Incidentes / Forenses...

ProcessInjection

ProcessInjection The program is designed to perform process injection. Currently the tool supports 5 process injection techniques. root@kitploit: 1 Vanilla Process Injection 2 DLL Injection 3 Process Hollowing 4 APC Queue 5 KernelCallbackTable Injection The tool accepts shellcode in 4 formats...

Shelltropy

Shelltropy Cuanto más predecible seas, menos serás detectado Una técnica para ocultar shellcode malicioso basada en baja entropía mediante codificación Shannon. La entropía es la medida de la aleatoriedad en un conjunto de datos aquí: shellcode. Cuanto mayor es la entropía, más aleatorios son los...

Abused-Legitimate-Services

Abused Legitimate Services Legitimate third-party Platform-as-a-Service PaaS providers are becoming increasingly leveraged by threat actors for phishing and malware deployment. PaaS providers such as cloud instances, marketing platforms, content delivery networks CDN, and dynamic DNS servers have...

BypassAV

BypassAV This map lists the essential techniques to bypass anti-virus and EDR as a reminder: it is highly recommended to read the articles related to manual techniques rather than using open source tools which are more likely to be suspected by the anti-virus because of IOSs Preview Edit the...

PowerShell-Obfuscation-Bible

PowerShell Obfuscation Bible A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to bypass signature-based detection, compiled for educational purposes. The contents of this repository are the result of personal research, including reading...

Http-Asynchronous-Reverse-Shell

HTTP/S Asynchronous Reverse Shell ✨ Introduction In an age where advanced detection systems such as IDS, IPS, EDR, AV, and firewalls dominate corporate networks, evading them during offensive security assessments is a challenge. Most reverse shells leverage TCP tunnels L4, which are now routinely...