47 Commits

Author SHA1 Message Date
Lsec fc50e3226b Merge pull request #7 from CyberSecurityUP/LsassDump
Lsass dump
2025-01-26 10:05:48 +02:00
Joas A Santos 6504cad0ff Create readme.md 2025-01-18 01:04:45 -03:00
Joas A Santos e52d898487 Update LsassDump.cpp 2025-01-18 00:52:40 -03:00
Joas A Santos 7000750136 Create Lsasssyscall.h 2025-01-13 19:11:20 -03:00
Joas A Santos 4707d52004 Create lsasssyscall.asm 2025-01-13 19:11:02 -03:00
Joas A Santos ffdd3d59dc Create LsassDump.cpp 2025-01-13 19:09:47 -03:00
lsecqt 3a074389dc ADS and Local staging 2025-01-11 20:22:07 +02:00
lsecqt d325801aeb Refactoring the structure 2025-01-11 19:20:31 +02:00
Lsec f69de67edd Merge pull request #6 from cocomelonc/main
add WINAPI hashing evasion PoC
2025-01-11 19:07:20 +02:00
lsecqt cfba2b8e27 Userspace enumeration 2025-01-11 15:39:50 +02:00
lsecqt 07aff5b79b Network enumeration 2025-01-10 21:03:50 +02:00
Lsec 6c95d803d8 Fixes typos and function call errors on GetProcessFromArgv.c 2024-08-16 13:03:16 +03:00
cocomelonc ff929fcb80 add WINAPI hashing evasion PoC 2024-05-31 19:02:38 +03:00
Lsec 6d6226a020 Merge pull request #5 from cocomelonc/main
persistence: AppInit_DLLs
2024-05-29 18:18:07 +03:00
cocomelonc 1187a6d53a persistence via accessibility features: sethc.exe 2024-05-23 06:40:16 +03:00
cocomelonc 7e21a3490d persistence: AppInit_DLLs 2024-05-13 01:15:11 +03:00
Lsec 277bdcda3c Merge pull request #4 from cocomelonc/main
persistence: screensaver hijacking PoC
2024-05-12 23:57:32 +03:00
cocomelonc 669ba621e0 persistence: screensaver hijacking PoC 2024-05-12 22:28:11 +03:00
Lsec 4dc0730114 Merge pull request #3 from Dharani-sanjaiy/main
Added new technique
2024-05-11 10:43:39 +03:00
Dharani-sanjaiy 1bb7243269 Added new technique 2024-05-11 03:13:42 -04:00
Lsec 477d8e1e25 Merge pull request #2 from cocomelonc/main
Find process ID by NtGetNextProcess
2024-05-10 23:54:44 +03:00
cocomelonc 434068aa14 Find process ID by NtGetNextProcess 2024-05-09 18:14:36 +03:00
lsecqt c400fd9a26 timestamp add 2024-04-05 17:21:13 +03:00
lsecqt 635d58c841 Readme update 2024-04-05 17:17:35 +03:00
lsecqt 6e81f4795d persistence 2024-04-05 17:09:07 +03:00
lsecqt ec0caf326f smb staging 2024-04-02 21:42:21 +03:00
Lsec 64f40f6c99 Create ThreadInject.c
Thread Injection
2023-06-23 11:33:26 +03:00
lsecqt b3c2388b8c NtOpenProcess 2023-05-28 07:22:40 -07:00
lsecqt e0b912d346 Get ProcessID by Name from ARGV 2023-05-24 07:18:13 -07:00
lsecqt 05db8bc477 User space enumeration and xor decryption 2023-05-24 02:28:33 -07:00
lsecqt 67707f7f8c Refactor 2023-04-12 02:43:08 -07:00
lsecqt 950dc29b72 Direct Syscalls 2023-04-12 02:37:23 -07:00
lsecqt ea0d426d35 NtDLL Unhooking 2023-04-11 04:37:40 -07:00
lsecqt 7306302649 tl32help process enum 2023-04-11 04:26:52 -07:00
lsecqt 3a8915b14d Buffer downloader 2023-04-11 04:11:45 -07:00
lsecqt e91351d27e NtCreateThreadEx 2023-04-11 03:56:09 -07:00
lsecqt 61157f84ad ZWALLOCATE and ZWWRITEVMEM 2023-04-11 03:52:54 -07:00
lsecqt bbec709992 Readme fix 2023-04-11 03:34:08 -07:00
lsecqt 4f05303fb1 Readme 2023-04-11 03:29:59 -07:00
lsecqt 7773ebbec8 Sandbox evasion added 2023-04-11 02:57:20 -07:00
lsecqt 0371253808 Added Readme for alternative shellcode exec 2023-04-11 02:28:03 -07:00
lsecqt 0ebe44e2b0 AlternativeShellcodeExec import 2023-04-11 02:20:27 -07:00
Lsec 61d4ef966b Create basicProcessInjection.cpp 2023-04-08 20:41:48 +03:00
Lsec dcde80f029 Create ShellExecuteEx.cpp 2023-04-07 22:31:47 +03:00
Lsec 308d8997b2 Create directPointerToFileMap.cpp 2023-04-07 21:21:53 +03:00
Lsec f35a3797e0 Create processorsCount.cpp 2023-04-05 12:42:21 +03:00
Lsec ee591bc54b Initial commit 2023-04-05 12:39:33 +03:00