Lsec
|
fc50e3226b
|
Merge pull request #7 from CyberSecurityUP/LsassDump
Lsass dump
|
2025-01-26 10:05:48 +02:00 |
|
Joas A Santos
|
6504cad0ff
|
Create readme.md
|
2025-01-18 01:04:45 -03:00 |
|
Joas A Santos
|
e52d898487
|
Update LsassDump.cpp
|
2025-01-18 00:52:40 -03:00 |
|
Joas A Santos
|
7000750136
|
Create Lsasssyscall.h
|
2025-01-13 19:11:20 -03:00 |
|
Joas A Santos
|
4707d52004
|
Create lsasssyscall.asm
|
2025-01-13 19:11:02 -03:00 |
|
Joas A Santos
|
ffdd3d59dc
|
Create LsassDump.cpp
|
2025-01-13 19:09:47 -03:00 |
|
lsecqt
|
3a074389dc
|
ADS and Local staging
|
2025-01-11 20:22:07 +02:00 |
|
lsecqt
|
d325801aeb
|
Refactoring the structure
|
2025-01-11 19:20:31 +02:00 |
|
Lsec
|
f69de67edd
|
Merge pull request #6 from cocomelonc/main
add WINAPI hashing evasion PoC
|
2025-01-11 19:07:20 +02:00 |
|
lsecqt
|
cfba2b8e27
|
Userspace enumeration
|
2025-01-11 15:39:50 +02:00 |
|
lsecqt
|
07aff5b79b
|
Network enumeration
|
2025-01-10 21:03:50 +02:00 |
|
Lsec
|
6c95d803d8
|
Fixes typos and function call errors on GetProcessFromArgv.c
|
2024-08-16 13:03:16 +03:00 |
|
cocomelonc
|
ff929fcb80
|
add WINAPI hashing evasion PoC
|
2024-05-31 19:02:38 +03:00 |
|
Lsec
|
6d6226a020
|
Merge pull request #5 from cocomelonc/main
persistence: AppInit_DLLs
|
2024-05-29 18:18:07 +03:00 |
|
cocomelonc
|
1187a6d53a
|
persistence via accessibility features: sethc.exe
|
2024-05-23 06:40:16 +03:00 |
|
cocomelonc
|
7e21a3490d
|
persistence: AppInit_DLLs
|
2024-05-13 01:15:11 +03:00 |
|
Lsec
|
277bdcda3c
|
Merge pull request #4 from cocomelonc/main
persistence: screensaver hijacking PoC
|
2024-05-12 23:57:32 +03:00 |
|
cocomelonc
|
669ba621e0
|
persistence: screensaver hijacking PoC
|
2024-05-12 22:28:11 +03:00 |
|
Lsec
|
4dc0730114
|
Merge pull request #3 from Dharani-sanjaiy/main
Added new technique
|
2024-05-11 10:43:39 +03:00 |
|
Dharani-sanjaiy
|
1bb7243269
|
Added new technique
|
2024-05-11 03:13:42 -04:00 |
|
Lsec
|
477d8e1e25
|
Merge pull request #2 from cocomelonc/main
Find process ID by NtGetNextProcess
|
2024-05-10 23:54:44 +03:00 |
|
cocomelonc
|
434068aa14
|
Find process ID by NtGetNextProcess
|
2024-05-09 18:14:36 +03:00 |
|
lsecqt
|
c400fd9a26
|
timestamp add
|
2024-04-05 17:21:13 +03:00 |
|
lsecqt
|
635d58c841
|
Readme update
|
2024-04-05 17:17:35 +03:00 |
|
lsecqt
|
6e81f4795d
|
persistence
|
2024-04-05 17:09:07 +03:00 |
|
lsecqt
|
ec0caf326f
|
smb staging
|
2024-04-02 21:42:21 +03:00 |
|
Lsec
|
64f40f6c99
|
Create ThreadInject.c
Thread Injection
|
2023-06-23 11:33:26 +03:00 |
|
lsecqt
|
b3c2388b8c
|
NtOpenProcess
|
2023-05-28 07:22:40 -07:00 |
|
lsecqt
|
e0b912d346
|
Get ProcessID by Name from ARGV
|
2023-05-24 07:18:13 -07:00 |
|
lsecqt
|
05db8bc477
|
User space enumeration and xor decryption
|
2023-05-24 02:28:33 -07:00 |
|
lsecqt
|
67707f7f8c
|
Refactor
|
2023-04-12 02:43:08 -07:00 |
|
lsecqt
|
950dc29b72
|
Direct Syscalls
|
2023-04-12 02:37:23 -07:00 |
|
lsecqt
|
ea0d426d35
|
NtDLL Unhooking
|
2023-04-11 04:37:40 -07:00 |
|
lsecqt
|
7306302649
|
tl32help process enum
|
2023-04-11 04:26:52 -07:00 |
|
lsecqt
|
3a8915b14d
|
Buffer downloader
|
2023-04-11 04:11:45 -07:00 |
|
lsecqt
|
e91351d27e
|
NtCreateThreadEx
|
2023-04-11 03:56:09 -07:00 |
|
lsecqt
|
61157f84ad
|
ZWALLOCATE and ZWWRITEVMEM
|
2023-04-11 03:52:54 -07:00 |
|
lsecqt
|
bbec709992
|
Readme fix
|
2023-04-11 03:34:08 -07:00 |
|
lsecqt
|
4f05303fb1
|
Readme
|
2023-04-11 03:29:59 -07:00 |
|
lsecqt
|
7773ebbec8
|
Sandbox evasion added
|
2023-04-11 02:57:20 -07:00 |
|
lsecqt
|
0371253808
|
Added Readme for alternative shellcode exec
|
2023-04-11 02:28:03 -07:00 |
|
lsecqt
|
0ebe44e2b0
|
AlternativeShellcodeExec import
|
2023-04-11 02:20:27 -07:00 |
|
Lsec
|
61d4ef966b
|
Create basicProcessInjection.cpp
|
2023-04-08 20:41:48 +03:00 |
|
Lsec
|
dcde80f029
|
Create ShellExecuteEx.cpp
|
2023-04-07 22:31:47 +03:00 |
|
Lsec
|
308d8997b2
|
Create directPointerToFileMap.cpp
|
2023-04-07 21:21:53 +03:00 |
|
Lsec
|
f35a3797e0
|
Create processorsCount.cpp
|
2023-04-05 12:42:21 +03:00 |
|
Lsec
|
ee591bc54b
|
Initial commit
|
2023-04-05 12:39:33 +03:00 |
|