ProcessStomping

ProcessStomping Uma variação do ProcessOverwriting para executar shellcode em uma seção de um executável O que é Para uma explicação mais detalhada, você pode ler meu post no blog Process Stomping é uma variação do Process Overwriting do hasherezade e tem a vantagem de escrever um payload de...

sRDI

sRDI - Injeção de DLL Refletiva em Shellcode O sRDI permite a conversão de arquivos DLL em shellcode independente de posição. Ele tenta ser um carregador de PE totalmente funcional, suportando permissões de seção adequadas, callbacks TLS e verificações de integridade. Pode ser visto como um...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

venom-rs

Shellcode Reflective DLL Injection sRDI في Rust الاسم الرمزي: Venom حقن الـ shellcode الانعكاسي للـ DLL sRDI هو تقنية حقن عمليات تسمح لنا بتحويل أي DLL إلى كود مستقل عن الموضع position-independent code يمكن حقنه بعد ذلك باستخدام تقنية حقن وتنفيذ الـ shellcode المفضلة لدينا. الميزات حجم المُحمّل...

ProcessStomping - A Variation Of ProcessOverwriting To Execute Shellcode On An Executable'S Section

A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a targeted sectio...

RdpThief - Extracting Clear Text Passwords From Mstsc.Exe Using API Hooking

RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and injecting the...