몾 Artemis @mixic@nanao.cybtex.fr

Aujourd'hui, SIGSEGV ne cesse de me narguer.

PPLmedic

Dump the memory of any PPL with a Userland exploit chain

https://github.com/itm4n/PPLmedic

HTTP Toolkit

Targeted interception for specific clients rather than intercepting everything and so avoids capturing irrelevant traffic or disrupting other applications

https://httptoolkit.com

Kali Purple

Defensive Security - Kali Purple for Blue & Purple Teams

https://www.kali.org/get-kali/

PolarProxy

• Custom TLS Redirection

One new feature in PolarProxy is the --redirect argument, which can be used to redirect TLS traffic destined for a specific domain name to a different domain. This feature can be used to redirect TLS-encrypted malware traffic going to a known C2 domain to a local HTTPS sandbox.

https://www.netresec.com/?page=PolarProxy

bootlicker

UEFI bootkit used to achieve initial usermode execution

https://github.com/realoriginal/bootlicker

Exegol v3.0.1

• Documentation

https://github.com/ThePorgs/Exegol-images

dns.toys

A DNS server that takes creative liberties with the DNS protocol.

https://github.com/knadh/dns.toys

FToDNS

PoC - File Transfert over DNS

https://github.com/neitzert/FToDNS

mimic

Convert execution on Linux x86_64

https://github.com/emptymonkey/mimic

MemFiles

Cobalt Strike toolkit to write files produced by Beacon to memory instead of disk

https://github.com/Octoberfest7/MemFiles

BokuLoader

PoC UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features for x64 HTTP/S beacons

https://github.com/xforcered/BokuLoader

• LPE via StorSvc

Windows LPE via StorSvc (writable SYSTEM path DLL hijacking)

https://github.com/blackarrowsec/redteam-research

• MISC peripper

Inject and dump executable code bytes from PE file. Output ̀-f` (format: CSharp | Python)

https://github.com/daem0nc0re/TangledWinExec/tree/main/Misc#peripper

Beacon Object Files

• BackdoorSCManager/entry.c

Need an almost invisible, post-exploitation, persistent, fileless, LPE backdoor? There are many, but this one looks really beautiful for me: type « sc.exe sdset scmanager D:(A;;KA;;;WD) » from an elevated command prompt.

https://github.com/snovvcrash/BOFs

PSBits

• Misc/BreakChain.c

Simple PoC for self-breaking own parent-child process chain

https://github.com/gtworek/PSBits

Jarviz v0.2.0

JAR file analyzer. Metadata from a JAR such as its manifest, manifest entries, bytecode versions, declarative services, module descriptors and more

https://github.com/kordamp/jarviz

JBang 0.104.0

Run Java code directly.

https://github.com/jbangdev/jbang

PingCastle 3.0.0.0

https://github.com/vletoux/pingcastle/releases/