Popular repositories Loading
-
Dirty-Vanity
Dirty-Vanity PublicA POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass…
-
LsassSilentProcessExit
LsassSilentProcessExit PublicCommand line interface to dump LSASS memory to disk via SilentProcessExit
-
-
ContainYourself
ContainYourself PublicA PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
-
DCOMUploadExec
DCOMUploadExec PublicDCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
Repositories
- DCOMUploadExec Public
DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
deepinstinct/DCOMUploadExec’s past year of commit activity - Israel-Cyber-Warfare-Threat-Actors Public
Updated Repository for the Cyber Community Regarding Cyber Threats Affecting Israel
deepinstinct/Israel-Cyber-Warfare-Threat-Actors’s past year of commit activity - Rusty-Flag-DecryptData Public
A tool to decrypt the information sent by the Rusty Flag malware to the C2
deepinstinct/Rusty-Flag-DecryptData’s past year of commit activity - ContainYourself Public
A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
deepinstinct/ContainYourself’s past year of commit activity