NovaHypervisor

NovaHypervisor Description NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks either via Bring Your Own Vulnerable Driver BYOVD or other means by safeguarding defense products AntiVirus / Endpoint Protection and kerne...

Stracciatella

Stracciatella v0.7 Powershell runspace from within C aka SharpPick technique with AMSI, ETW and Script Block Logging disabled for your pleasure. Nowadays, when Powershell got severly instrumented by use of techniques such as: AMSI ETW Script Block Logging Transcript file Modules logging Constrain...

IronSharpPack

IronSharpPack IronSharpPack は、人気のある C プロジェクトを IronPython スクリプトに埋め込み、AMSI バイパスを実行してから C プロジェクトをリフレクティブ ロードするスクリプト群のリポジトリです。IronPython と DLR にはインストルメンテーションがほとんど あるいはまったく ないため、これらのアセンブリの実行に効果的な言語となっています。これは S3cur3Th1sSh1t の人気プロジェクト PowerSharpPack に触発されたものです。C アセンブリは Flangvik の Sharp Collection...

. NET Remoting remote code execution vulnerability explore-exploit warning-the black bar safety net

This is an article on . NET Remoting the security of the Coptic text, in the article will use a simple RCE exploit and provide the right case will be described. This paper mainly has the following content: 1. The . NET Remoting technology made a brief introduction 2. Use VS 编写 一 个 简单 的 .NET...