 Melvin L
|
5a58cce49d
|
Update Program.cs
|
2021-10-03 18:41:03 +02:00 |
|
|
Melvin L
|
3d1f235f07
|
Update Program.cs
|
2021-10-01 14:39:55 +02:00 |
|
|
Flangvik
|
63dcedcd45
|
Updated with clean source code, obfuscate yourself to get the results you want!
Updated with SharpSploit
|
2021-10-01 14:17:31 +02:00 |
|
|
Flangvik
|
dc34a4bea6
|
HackThePlanet!!!!
|
2020-07-02 18:36:53 +00:00 |
|
|
Flangvik
|
23c52feead
|
Signature update
|
2020-06-24 07:27:58 +00:00 |
|
|
Flangvik
|
f3a5b893f4
|
Forgot to commit entire repo, lool
|
2020-06-23 13:36:16 +00:00 |
|
|
Flangvik
|
55efaee0ac
|
Signature update :)
|
2020-06-21 17:44:12 +00:00 |
|
|
Flangvik
|
4ca3953b12
|
Added ETW unhook based on the RastaMouse SharpC2 code https://github.com/SharpC2/SharpC2/blob/dev/AgentModules/StageOne/Execution/RemoteExecution.cs
Fixed signature update aswell, this time defender actually added signatures for the bytes used to patch AMSI. Obfuscated and fixed :)
|
2020-06-19 23:11:20 +00:00 |
|
|
Flangvik
|
8a5f2d2aab
|
Fixed a AMSI patch bug, MSBUILD lolbin should now work fine for both 32 and 64 bit system
|
2020-06-19 10:30:20 +00:00 |
|
|
Flangvik
|
4f3eb544f6
|
Another refud (Also fixed the TLS issue from last commit,sry about that)
|
2020-06-19 09:31:23 +00:00 |
|
|
Flangvik
|
cfaaedee3d
|
Signature update
|
2020-06-16 19:05:24 +00:00 |
|
|
Flangvik
|
6693813e14
|
Interactive bugfix , and signature update
|
2020-06-14 00:04:03 +00:00 |
|
|
Flangvik
|
5c872f6663
|
Another signature update, enjoy!
|
2020-06-12 14:58:17 +00:00 |
|
|
Flangvik
|
0f4548b9d2
|
Half-merged with https://gist.github.com/Arno0x/2b223114a726be3c5e7a9cacd25053a2
Massive credits to @Arno0x for his contrib on this !:)
Signatures updated!
|
2020-06-10 11:15:12 +00:00 |
|
|
Flangvik
|
2637fd287a
|
Minor changes , updated README
|
2020-06-09 22:57:19 +00:00 |
|
|
Flangvik
|
a5ca26662a
|
Major re-work/cleanup, interactive mode has been dumped down so it's not longer hardcoded for this repo
Binaries folder is removed, use the SharpCollection project instead
|
2020-06-09 22:27:09 +00:00 |
|
|
Flangvik
|
09cdd13041
|
Last commit/ signature update before some needed cleanup
|
2020-06-09 21:10:07 +00:00 |
|
|
Flangvik
|
8507a65a75
|
Use of ordinals failed, reverted
|
2020-06-09 19:28:27 +00:00 |
|
|
Flangvik
|
4cdb35aaab
|
Dirty refud, next release will be much cleaner
|
2020-06-09 15:23:48 +00:00 |
|
|
ReFUD BOT
|
dd68e44351
|
Automatic ReFUD - 03.06.2020
|
2020-06-03 16:27:26 +02:00 |
|
|
Flangvik
|
a570f4812c
|
ReFud.
Ended up writing a tiny C# code obfuscator, hopefully a step closer to automatic re-fud
|
2020-06-03 01:10:36 +02:00 |
|
|
Flangvik
|
ce387a6be5
|
REFud / BugFix
|
2020-05-29 10:40:19 +02:00 |
|
|
Flangvik
|
1151868b63
|
Added more screenshots to showcase usage
Added non interactive support with encoded input args
Still FUD
|
2020-05-28 14:55:21 +02:00 |
|
|
Flangvik
|
3937d8f5db
|
Fixed locale file loading not working!
|
2020-05-28 12:11:37 +02:00 |
|
|
Flangvik
|
a1335fa8fe
|
Added the updated version of Seatbelt + ReFUD
|
2020-05-28 12:08:34 +02:00 |
|
|
Flangvik
|
0bffa7b741
|
Another FUD update, enjoy! :)
|
2020-05-16 13:13:44 +02:00 |
|
|
Flangvik
|
f59979cc1c
|
REFud, let's see how longs this one lasts....(StopWatch started..)
|
2020-05-10 20:03:50 +02:00 |
|
|
Flangvik
|
b4b8a3be5f
|
REFud, gonna have to automate this
|
2020-05-09 15:50:59 +02:00 |
|
|
Flangvik
|
e7d9597286
|
Signature detected, changed
|
2020-05-07 16:20:08 +02:00 |
|
|
Flangvik
|
1522de7ebc
|
Major commit, changed some stuff to make my life easier later on
Removed VisualStudio stuff, only need program.cs to compile this
Changed the AMSI bypass a bit to get past latest Defender Signatur
|
2020-05-07 13:13:18 +02:00 |
|