Windows user-land hooks manipulation tool.
Repositories
rmusser01 repositories
CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys
Random Tools
Miscellaneous Tools
Dumping
Framework to create Munchers-like games
A collaborative, multi-platform, red teaming framework
NSE script to use with nmap tool.
Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table
Loads any C# binary in mem, patching AMSI and bypassing Windows Defender
SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket
Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().
Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection
Collection of resources for my preparation to take the OSEE certification.
Collection of Offensive C# Tooling