Melvin L
5a58cce49d
Update Program.cs
2021-10-03 18:41:03 +02:00
Melvin L
3d1f235f07
Update Program.cs
2021-10-01 14:39:55 +02:00
Flangvik
63dcedcd45
Updated with clean source code, obfuscate yourself to get the results you want!
...
Updated with SharpSploit
2021-10-01 14:17:31 +02:00
Melvin L
54a3d3ed8c
Update README.md
2020-08-03 20:54:40 +02:00
Flangvik
dc34a4bea6
HackThePlanet!!!!
2020-07-02 18:36:53 +00:00
Flangvik
23c52feead
Signature update
2020-06-24 07:27:58 +00:00
Flangvik
f3a5b893f4
Forgot to commit entire repo, lool
2020-06-23 13:36:16 +00:00
Flangvik
ee41866cb2
Signature update, removed interactive mode!
2020-06-23 09:26:35 +00:00
Flangvik
ce8070a88e
Removed old compiled bin, my bad
2020-06-21 17:46:40 +00:00
Flangvik
55efaee0ac
Signature update :)
2020-06-21 17:44:12 +00:00
Flangvik
4ca3953b12
Added ETW unhook based on the RastaMouse SharpC2 code https://github.com/SharpC2/SharpC2/blob/dev/AgentModules/StageOne/Execution/RemoteExecution.cs
...
Fixed signature update aswell, this time defender actually added signatures for the bytes used to patch AMSI. Obfuscated and fixed :)
2020-06-19 23:11:20 +00:00
Flangvik
8a5f2d2aab
Fixed a AMSI patch bug, MSBUILD lolbin should now work fine for both 32 and 64 bit system
2020-06-19 10:30:20 +00:00
Flangvik
4f3eb544f6
Another refud (Also fixed the TLS issue from last commit,sry about that)
2020-06-19 09:31:23 +00:00
Flangvik
e3a4c8911b
Signature update
2020-06-19 09:01:37 +00:00
Flangvik
cfaaedee3d
Signature update
2020-06-16 19:05:24 +00:00
Flangvik
6693813e14
Interactive bugfix , and signature update
2020-06-14 00:04:03 +00:00
Flangvik
5c872f6663
Another signature update, enjoy!
2020-06-12 14:58:17 +00:00
Flangvik
0f4548b9d2
Half-merged with https://gist.github.com/Arno0x/2b223114a726be3c5e7a9cacd25053a2
...
Massive credits to @Arno0x for his contrib on this !:)
Signatures updated!
2020-06-10 11:15:12 +00:00
Flangvik
8fe3cc706f
Updated README
2020-06-09 23:00:19 +00:00
Flangvik
2637fd287a
Minor changes , updated README
2020-06-09 22:57:19 +00:00
Flangvik
a5ca26662a
Major re-work/cleanup, interactive mode has been dumped down so it's not longer hardcoded for this repo
...
Binaries folder is removed, use the SharpCollection project instead
2020-06-09 22:27:09 +00:00
Flangvik
09cdd13041
Last commit/ signature update before some needed cleanup
2020-06-09 21:10:07 +00:00
Flangvik
8507a65a75
Use of ordinals failed, reverted
2020-06-09 19:28:27 +00:00
Flangvik
4cdb35aaab
Dirty refud, next release will be much cleaner
2020-06-09 15:23:48 +00:00
ReFUD BOT
dd68e44351
Automatic ReFUD - 03.06.2020
2020-06-03 16:27:26 +02:00
Flangvik
0a4f81e074
Updated README
2020-06-03 01:16:15 +02:00
Flangvik
a570f4812c
ReFud.
...
Ended up writing a tiny C# code obfuscator, hopefully a step closer to automatic re-fud
2020-06-03 01:10:36 +02:00
Flangvik
ce387a6be5
REFud / BugFix
2020-05-29 10:40:19 +02:00
Flangvik
a1214f052b
Replaced screenshots with code-text (Looks way better)
2020-05-28 15:05:49 +02:00
Flangvik
1728950c3f
Fixed pictures placement, need to take better screenshots..
2020-05-28 14:58:53 +02:00
Flangvik
1151868b63
Added more screenshots to showcase usage
...
Added non interactive support with encoded input args
Still FUD
2020-05-28 14:55:21 +02:00
Flangvik
3937d8f5db
Fixed locale file loading not working!
2020-05-28 12:11:37 +02:00
Flangvik
a1335fa8fe
Added the updated version of Seatbelt + ReFUD
2020-05-28 12:08:34 +02:00
Flangvik
fa36289b47
Readme update
2020-05-16 13:14:22 +02:00
Flangvik
0bffa7b741
Another FUD update, enjoy! :)
2020-05-16 13:13:44 +02:00
Flangvik
b700de62ae
Update readme
2020-05-10 20:05:29 +02:00
Flangvik
f59979cc1c
REFud, let's see how longs this one lasts....(StopWatch started..)
2020-05-10 20:03:50 +02:00
Flangvik
c9a35609c4
Updated README with new scan results
2020-05-09 15:53:10 +02:00
Flangvik
b4b8a3be5f
REFud, gonna have to automate this
2020-05-09 15:50:59 +02:00
Melvin L
1fd54bf9d8
Delete BetterSafetyKatz.bin
2020-05-07 23:22:39 +02:00
Flangvik
e7d9597286
Signature detected, changed
2020-05-07 16:20:08 +02:00
Flangvik
1a7972d6ca
Spelling stuff
2020-05-07 13:16:38 +02:00
Flangvik
1522de7ebc
Major commit, changed some stuff to make my life easier later on
...
Removed VisualStudio stuff, only need program.cs to compile this
Changed the AMSI bypass a bit to get past latest Defender Signatur
2020-05-07 13:13:18 +02:00
Flangvik
bd238cdfe7
Updated BetterSafetyKatz, magic
2020-05-07 10:41:09 +02:00
Flangvik
38f399b308
Header fix
2020-05-06 17:49:32 +02:00
Flangvik
36d331d294
Removed the pre-compiled binary, if anything i would release an obfuscated one. Meanwhile compile yourself!
...
Updated with an working MSBuild.xml LOLBin payload (Bye Bye AppLocker)
Added an "0" option to exit the app (Needed when running in MSBuild)
2020-05-06 17:47:04 +02:00
Flangvik
ee3a8d0c3e
Updated BetterSafetyKatz
2020-05-06 15:52:13 +02:00
Flangvik
adf1782788
Removed mimikatzRaw (found another method)
...
BetterSafetyKatz is a my own fork of SafetyKatz that pulls the latest and greates mimikatz release from the org repo (in memory)
Credits to https://twitter.com/Mrtn9 for the backseat help on this <3
2020-05-06 14:32:33 +02:00
Melvin L
855580bf96
Added the latest verison of Katz
2020-05-06 13:56:27 +02:00
Flangvik
263b338d8b
Updated readme, added scan results
2020-05-06 13:24:36 +02:00