ThievingFox

ThievingFox ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and windows utilities. Each module leverages a specific method of injecting into the target process, and then hooks internals functions to gather crendentials. The accompanying...

CS-MemoryEvasion

MemoryEvasion A Cobalt Strike memory evasion loader for redteamers,Support x86/x64 stager/stagerless payload with profiletested on windows7/10,winserver 2012 How Evasion? Hook Sleep,CreateProcessA,CreateHeap,GetProcessHeap functions before the shellcode is loaded into memory. Create a new heap fo...

xnuspy

xnuspy Output from the kernel log after compiling and running example/open1hook.c xnuspy is a pongoOS module that installs a new system call, xnuspyctl, which allows you to hook kernel functions from userspace. It supports iOS 13.x, iOS 14.x, and iOS 15.x on checkra1n 0.12.2 and up. 4K devices ar...

KernelPatch

KernelPatch Patching and hooking the Linux kernel with only stripped Linux kernel image. | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || Obtain all symbol information without source code and symbol information. Inject...

mora-hwbp

Mora-HWBP — AMSI / WLDP / ETW Telemetry Hooking via Hardware Breakpoints A security-research Proof-of-Concept POC demonstrating hardware-breakpoint CPU debug register based function hooking as an alternative to traditional in-memory code patching. Purpose & Scope This repository is published...

openrasp

OpenRASP Introduction Unlike perimeter control solutions like WAF, OpenRASP directly integrates its protection engine into the application server by instrumentation. It can monitor various events including database queries, file operations and network requests etc. When an attack happens, WAF...

BasicHook

BasicHook Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly...

IAT-Hook

Hooking - IAT Hooking Hooking is a technique that enables a user to redirect the execution flow of a program. Most of the time we use function hooking. We will either replace or redirect a function to our own, this is very usefull and has multiple usecases. There are multiple ways of hooking, her...

hwbp4mw

Questo articolo era originariamente per VX-Underground Black Mass Halloween Edition 2022. Motori di hooking: Motore di hooking hwbp x86/x64 thread-safe c Libreria di breakpoint PAGEGUARD/hwbp c++20 Libreria hwbp esempio DLL c++20 Tecnica generica di evasione user-land x64 che utilizza i registri ...

Android-Imgui-Template v0.1.0

Android ImGui Template Android menu template using Zygisk + ImGui. https://github.com/user-attachments/assets/816113d9-611d-4909-a08e-0f4e8ab6d03b Requirements Android NDK r27 ndk;27.0.12077973 Build Locally root@kitploit: export ANDROIDNDKHOME=/path/to/ndk/27.0.12077973 $ANDROIDNDKHOME/ndk-build...