ThreadStackSpoofer

Preuve de concept de Thread Stack Spoofing / Call Stack Spoofing Une implémentation de preuve de concept pour une technique avancée d'évasion en mémoire qui usurpe la pile d'appels du thread Thread Call Stack. Cette technique permet de contourner les règles d'examen de la mémoire basées sur les...

GPU_ShellCode

Отравление gpu; спрятать пейлоад внутри памяти gpu. После моего более раннего репозитория, в котором я использовал описание потока, чтобы спрятать пейлоад, я захотел найти новый способ, так что теперь я использую память gpu nividia с помощью cuda api, чтобы выделять, записывать и освобождать её,...

Shellcode-Hide

В этом репозитории нет README...

FTP Fetch, Hidden Bind Ipknock TCP Stager

Fetch and execute an x86 payload from an FTP server. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket...

HTTPS Fetch, Hidden Bind Ipknock TCP Stager

Fetch and execute an x86 payload from an HTTPS server. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The sock...

DeathSleep - A PoC Implementation For An Evasion Technique To Terminate The Current Thread And Restore It Before Resuming Execution, While Implementing Page Protection Changes During No Execution

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution. Intro Sleep and obfuscation methods are well known in the maldev community, with different implementations, they...