defcon33_silence_kill_edr

🛡️ DEFCON 工作坊：让 EDR 各归其位 💀 像攻击者一样击杀和静默 EDR 代理 环境搭建 EDR 击杀 自定义 EDR 规避 🎯 你将做什么 每位学员都将获得自己的实验环境，用于： 🔍 调查一个真实的 EDR 代理：发现其钩子、日志和覆盖范围 ⚔️ 编译并部署已知威胁组织使用的 EDR 杀手 🔕 静默代理与租户之间的通信路径（嘘……） 🧠 实时逆向工程工具行为 🛠️ 编写自定义 C/C++ 代码来复现规避技术 🧬 像大佬一样打造你自己的 EDR 杀手和静默器 👨‍💻 形式 ✔️ 在你自己托管的虚拟机中进行动手实验 ✔️ 预装工具、样本和 EDR 模拟器 ✔️...

defcon27_csharp_workshop

This repository contains a collection of C code snippets and labs for writing custom backdoor payloads, as part of a workshop presented at Defcon 27. The code covers various topics, including Windows API calls, memory allocation, thread creation, and encryption. The code snippets are organized in...

Hak5 WiFi Pineapple Preconfiguration Command Injection

This module exploits a login/csrf check bypass vulnerability on WiFi Pineapples version 2.0 use exploit/linux/http/pineapple/bypasscmdinject msf undefinedbypasscmdinject show actions ...actions... msf undefinedbypasscmdinject set ACTION msf undefinedbypasscmdinject show options ...show and set...