Pinned Loading

1. DarkWidow DarkWidow Public

   Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+Bloc…

   C 783 105

2. AWS_Attack_Simulation_Detection_Lab AWS_Attack_Simulation_Detection_Lab Public

   This repo would contain detection of various aws attack simulations.

   13

3. SharpGmailC2 SharpGmailC2 Public

   Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol

   C# 264 46

4. reveng_rtkit reveng_rtkit Public

   Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

   C 267 59

5. AMSI-patches-learned-till-now AMSI-patches-learned-till-now Public

   I have documented all of the AMSI patches that I learned till now

   C++ 73 11

6. Learning-EDR-and-EDR_Evasion Learning-EDR-and-EDR_Evasion Public

   I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

   C++ 287 33