78 Commits

Author SHA1 Message Date
Melvin L 5a58cce49d Update Program.cs 2021-10-03 18:41:03 +02:00
Melvin L 3d1f235f07 Update Program.cs 2021-10-01 14:39:55 +02:00
Flangvik 63dcedcd45 Updated with clean source code, obfuscate yourself to get the results you want!
Updated with SharpSploit
2021-10-01 14:17:31 +02:00
Melvin L 54a3d3ed8c Update README.md 2020-08-03 20:54:40 +02:00
Flangvik dc34a4bea6 HackThePlanet!!!! 2020-07-02 18:36:53 +00:00
Flangvik 23c52feead Signature update 2020-06-24 07:27:58 +00:00
Flangvik f3a5b893f4 Forgot to commit entire repo, lool 2020-06-23 13:36:16 +00:00
Flangvik ee41866cb2 Signature update, removed interactive mode! 2020-06-23 09:26:35 +00:00
Flangvik ce8070a88e Removed old compiled bin, my bad 2020-06-21 17:46:40 +00:00
Flangvik 55efaee0ac Signature update :) 2020-06-21 17:44:12 +00:00
Flangvik 4ca3953b12 Added ETW unhook based on the RastaMouse SharpC2 code https://github.com/SharpC2/SharpC2/blob/dev/AgentModules/StageOne/Execution/RemoteExecution.cs
Fixed signature update aswell, this time defender actually added signatures for the bytes used to patch AMSI. Obfuscated and fixed :)
2020-06-19 23:11:20 +00:00
Flangvik 8a5f2d2aab Fixed a AMSI patch bug, MSBUILD lolbin should now work fine for both 32 and 64 bit system 2020-06-19 10:30:20 +00:00
Flangvik 4f3eb544f6 Another refud (Also fixed the TLS issue from last commit,sry about that) 2020-06-19 09:31:23 +00:00
Flangvik e3a4c8911b Signature update 2020-06-19 09:01:37 +00:00
Flangvik cfaaedee3d Signature update 2020-06-16 19:05:24 +00:00
Flangvik 6693813e14 Interactive bugfix , and signature update 2020-06-14 00:04:03 +00:00
Flangvik 5c872f6663 Another signature update, enjoy! 2020-06-12 14:58:17 +00:00
Flangvik 0f4548b9d2 Half-merged with https://gist.github.com/Arno0x/2b223114a726be3c5e7a9cacd25053a2
Massive credits to @Arno0x for his contrib on this !:)
Signatures updated!
2020-06-10 11:15:12 +00:00
Flangvik 8fe3cc706f Updated README 2020-06-09 23:00:19 +00:00
Flangvik 2637fd287a Minor changes , updated README 2020-06-09 22:57:19 +00:00
Flangvik a5ca26662a Major re-work/cleanup, interactive mode has been dumped down so it's not longer hardcoded for this repo
Binaries folder is removed, use the SharpCollection project instead
2020-06-09 22:27:09 +00:00
Flangvik 09cdd13041 Last commit/ signature update before some needed cleanup 2020-06-09 21:10:07 +00:00
Flangvik 8507a65a75 Use of ordinals failed, reverted 2020-06-09 19:28:27 +00:00
Flangvik 4cdb35aaab Dirty refud, next release will be much cleaner 2020-06-09 15:23:48 +00:00
ReFUD BOT dd68e44351 Automatic ReFUD - 03.06.2020 2020-06-03 16:27:26 +02:00
Flangvik 0a4f81e074 Updated README 2020-06-03 01:16:15 +02:00
Flangvik a570f4812c ReFud.
Ended up writing a tiny C# code obfuscator, hopefully a step closer to automatic re-fud
2020-06-03 01:10:36 +02:00
Flangvik ce387a6be5 REFud / BugFix 2020-05-29 10:40:19 +02:00
Flangvik a1214f052b Replaced screenshots with code-text (Looks way better) 2020-05-28 15:05:49 +02:00
Flangvik 1728950c3f Fixed pictures placement, need to take better screenshots.. 2020-05-28 14:58:53 +02:00
Flangvik 1151868b63 Added more screenshots to showcase usage
Added non interactive support with encoded input args
Still FUD
2020-05-28 14:55:21 +02:00
Flangvik 3937d8f5db Fixed locale file loading not working! 2020-05-28 12:11:37 +02:00
Flangvik a1335fa8fe Added the updated version of Seatbelt + ReFUD 2020-05-28 12:08:34 +02:00
Flangvik fa36289b47 Readme update 2020-05-16 13:14:22 +02:00
Flangvik 0bffa7b741 Another FUD update, enjoy! :) 2020-05-16 13:13:44 +02:00
Flangvik b700de62ae Update readme 2020-05-10 20:05:29 +02:00
Flangvik f59979cc1c REFud, let's see how longs this one lasts....(StopWatch started..) 2020-05-10 20:03:50 +02:00
Flangvik c9a35609c4 Updated README with new scan results 2020-05-09 15:53:10 +02:00
Flangvik b4b8a3be5f REFud, gonna have to automate this 2020-05-09 15:50:59 +02:00
Melvin L 1fd54bf9d8 Delete BetterSafetyKatz.bin 2020-05-07 23:22:39 +02:00
Flangvik e7d9597286 Signature detected, changed 2020-05-07 16:20:08 +02:00
Flangvik 1a7972d6ca Spelling stuff 2020-05-07 13:16:38 +02:00
Flangvik 1522de7ebc Major commit, changed some stuff to make my life easier later on
Removed VisualStudio stuff, only need program.cs to compile this
Changed the AMSI bypass a bit to get past latest Defender Signatur
2020-05-07 13:13:18 +02:00
Flangvik bd238cdfe7 Updated BetterSafetyKatz, magic 2020-05-07 10:41:09 +02:00
Flangvik 38f399b308 Header fix 2020-05-06 17:49:32 +02:00
Flangvik 36d331d294 Removed the pre-compiled binary, if anything i would release an obfuscated one. Meanwhile compile yourself!
Updated with an working MSBuild.xml LOLBin payload (Bye Bye AppLocker)
Added an "0" option to exit the app (Needed when running in MSBuild)
2020-05-06 17:47:04 +02:00
Flangvik ee3a8d0c3e Updated BetterSafetyKatz 2020-05-06 15:52:13 +02:00
Flangvik adf1782788 Removed mimikatzRaw (found another method)
BetterSafetyKatz is a my own fork of SafetyKatz that pulls the latest and greates mimikatz release from the org repo (in memory)
Credits to https://twitter.com/Mrtn9 for the backseat help on this <3
2020-05-06 14:32:33 +02:00
Melvin L 855580bf96 Added the latest verison of Katz 2020-05-06 13:56:27 +02:00
Flangvik 263b338d8b Updated readme, added scan results 2020-05-06 13:24:36 +02:00