Unicorn a tool for using a PowerShell downgrade attack
https://hakin9.org/unicorn-is-a-simple-tool-for-using-a-powershell-downgrade-attack-and-inject-shellcode-straight-into-memory/
https://hakin9.org/unicorn-is-a-simple-tool-for-using-a-powershell-downgrade-attack-and-inject-shellcode-straight-into-memory/
Hakin9 - IT Security Magazine
Unicorn a tool for using a PowerShell downgrade attack
Magic Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's PowerShell...
How to create your own Russian bot army - Programming - 0x00sec - The Home of the Hacker
https://0x00sec.org/t/how-to-create-your-own-russian-bot-army/22370
https://0x00sec.org/t/how-to-create-your-own-russian-bot-army/22370
Wireshark Tutorial: Decrypting HTTPS Traffic (Includes SSL and TLS)
https://unit42.paloaltonetworks.com/wireshark-tutorial-decrypting-https-traffic/
https://unit42.paloaltonetworks.com/wireshark-tutorial-decrypting-https-traffic/
Unit 42
Wireshark Tutorial: Decrypting HTTPS Traffic
This short Wireshark tutorial explains decrypting HTTPS traffic, including when you can accomplish it and how to do it.
PSBits/Misc at master · gtworek/PSBits · GitHub
https://github.com/gtworek/PSBits/tree/master/Misc
https://github.com/gtworek/PSBits/tree/master/Misc
GitHub
PSBits/Misc at master · gtworek/PSBits
Simple (relatively) things allowing you to dig a bit deeper than usual. - gtworek/PSBits
How to Reverse Office Droppers: Personal Notes – Marco Ramilli Web Corner
https://marcoramilli.com/2020/08/24/how-to-reverse-office-droppers-personal-notes/
https://marcoramilli.com/2020/08/24/how-to-reverse-office-droppers-personal-notes/
A Tale of Escaping a Hardened Docker container - Red Timmy Security
https://www.redtimmy.com/docker/a-tale-of-escaping-a-hardened-docker-container/
https://www.redtimmy.com/docker/a-tale-of-escaping-a-hardened-docker-container/
Red Timmy Security
A Tale of Escaping a Hardened Docker container - Red Timmy Security
How to escape out of a docker container by circumventing an ad-hoc reverse proxy that was supposed to prevent abuse of "docker.sock" file exposure
GitHub - jafarlihi/serpentine: Windows RAT (Remote Administration Tool) with a multiplatform RESTful C2 server
https://github.com/jafarlihi/serpentine
https://github.com/jafarlihi/serpentine
GitHub - tokyoneon/Chimera: Chimera is a (shiny and very hack-ish) PowerShell obfuscation noscript designed to bypass AMSI and commercial antivirus solutions.
https://github.com/tokyoneon/Chimera
https://github.com/tokyoneon/Chimera
GitHub
GitHub - tokyoneon/Chimera: Chimera is a PowerShell obfuscation noscript designed to bypass AMSI and commercial antivirus solutions.
Chimera is a PowerShell obfuscation noscript designed to bypass AMSI and commercial antivirus solutions. - tokyoneon/Chimera
GitHub - G0ldenGunSec/SharpSecDump: .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py
https://github.com/G0ldenGunSec/SharpSecDump
https://github.com/G0ldenGunSec/SharpSecDump
GitHub
GitHub - G0ldenGunSec/SharpSecDump: .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py
.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py - G0ldenGunSec/SharpSecDump
Bypass AMSI by manual modification | S3cur3Th1sSh1t
https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/
https://s3cur3th1ssh1t.github.io/Bypass_AMSI_by_manual_modification/
s3cur3th1ssh1t.github.io
Bypass AMSI by manual modification | S3cur3Th1sSh1t
This is my very first blog post. Its about how to manually change AMSI signatures/triggers to bypass it.