sRDI

sRDI - Shellcode Reflective DLL Injection sRDI allows for the conversion of DLL files to position independent shellcode. It attempts to be a fully functional PE loader supporting proper section permissions, TLS callbacks, and sanity checks. It can be thought of as a shellcode PE loader strapped t...

ProcessStomping

ProcessStomping A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction...

venom-rs

使用 Rust 实现的 Shellcode 反射式 DLL 注入 sRDI（代号：Venom） Shellcode 反射式 DLL 注入（sRDI）是一种进程注入技术，它允许我们将给定的 DLL 转换为位置无关代码，然后可以使用我们最喜欢的 Shellcode 注入与执行技术来注入该代码。 特性 反射式加载器的大小约为 4KB。 不会释放注入器分配的内存，也不会移除用户注入器设置的任何现有 RWX 权限（如果适用）。 不会在解析导入或重定位映像之后/之前覆盖或擦除新分配内存的 DOS 或 NT 头。 对由 VirtualAlloc 函数分配的每个节应用保护设置，并随后执行 DllMain...

ProcessStomping - A Variation Of ProcessOverwriting To Execute Shellcode On An Executable'S Section

A variation of ProcessOverwriting to execute shellcode on an executable's section What is it For a more detailed explanation you can read my blog post Process Stomping, is a variation of hasherezade’s Process Overwriting and it has the advantage of writing a shellcode payload on a targeted sectio...

RdpThief - Extracting Clear Text Passwords From Mstsc.Exe Using API Hooking

RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and injecting the...