donut

当前版本：v1.1 目录 1. 简介 2. 工作原理 3. 构建 4. 用法 5. 子项目 6. 使用 Donut 进行开发 7. 问题和讨论 8. 免责声明 1. 简介 Donut 是一个位置无关代码，能够在内存中执行 VBScript、JScript、EXE、DLL 文件和 .NET 程序集。Donut 创建的模块可以从 HTTP 服务器分段加载，或直接嵌入到加载器本身中。该模块可选地使用 Chaskey 分组密码和 128 位随机生成的密钥进行加密。文件在内存中加载并执行后，原始引用会被擦除以阻止内存扫描器。生成器和加载器支持以下特性： 使用 aPLib 和...

GRAT2

GRAT2 C2 root@kitploit: c.-.c c.-.c c.-.c c.-.c c.-.c / .. \ / .. \ / .. \ / .. \ / .. \ \ Y / \ Y / \ Y / \ Y / \ Y / .-/'-'-..-/'-'-..-/'-'-..-/'-'-..-/'-'-. || G || || R || || A || || T || || 2 || .' -' '. .' -' '. .' -' '. .' -' '. .' -' '. .-./-'.-..-./-.-..-./-'.-..-./-'.-..-./-'.-...

InlineExecute-Assembly

InlineExecute-Assembly InlineExecute-Assembly è un Beacon Object File BOF proof-of-concept che consente ai professionisti della sicurezza di eseguire assembly .NET in-process, in alternativa al tradizionale modulo execute-assembly di Cobalt Strike basato su fork-and-run. InlineExecute-Assembly...

BestEdrOfTheMarket - Little AV/EDR Bypassing Lab For Training And Learning Purposes

Little AV/EDR Evasion Lab for training & learning purposes. ️ under construction..​ | | | | | | \ / \ / | | | | | \ / / | | | | | | | | | | | | | | | | | | ' \ / \ | | | /\ \ | | || || | | || | | | | | | | | / |/||/| ||/|| \ /|| || || ||| | / | | | | | | |/| |/ | '| |/ / \ | | | | | | | |...

InlineExecute-Assembly - A PoC Beacon Object File (BOF) That Allows Security Professionals To Perform In Process .NET Assembly Execution

InlineExecute-Assembly is a proof of concept Beacon Object File BOF that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module. InlineExecute-Assembly will execute any assembly with the entr...