donut
PowerSharpPack
| donut | PowerSharpPack | |
|---|---|---|
| 4 | 3 | |
| 3,245 | 1,407 | |
| - | - | |
| 0.0 | 5.4 | |
| about 2 months ago | 20 days ago | |
| C | PowerShell | |
| BSD 3-clause "New" or "Revised" License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
donut
-
Bypassing Windows Defender (10 Ways)
The Donut project by TheWover is a very effective Position-Independent shellcode generator from PEs/DLLs. Depending on the input file given, it works different ways. For this PoC I will be using Mimikatz, so let us see how it works at a high level. From a brief look at the code, this would be the main routine of the Donut.exe executable tool:
-
Cannot Load .NET assemblies in memory!
Note that I used the loader from donut and it worked as expected! What am I doing wrong here people?
-
BEST KALI TOOL TO MAKE UNDETECTABLE BACKDOOR 2022?
Donut -- tool to convert (certain, very simple, non-.NET) PE files into shellcode.
- Does anyone know any good x64 shellcode loaders?
PowerSharpPack
-
Bypassing Windows Defender (10 Ways)
Luckily, this repo contains not only a lot of pre-built scripts for each famous tool but also the instructions to create your own scripts from your binaries.
- GitHub - S3cur3Th1sSh1t/PowerSharpPack: Many usefull offensive CSharp Projects wraped into Powershell for easy usage.
- GitHub - S3cur3Th1sSh1t/PowerSharpPack - Usefull offensive CSharp Projects wrapped into Powershell for easy usage.
What are some alternatives?
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
Shhhloader - Syscall Shellcode Loader (Work in Progress)
nimcrypt - PE Crypter written in Nim
vivanewvegas-wabbajack - A Wabbajack port of the Viva New Vegas modding guide.
ropfuscator - ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
pe_to_shellcode - Converts PE into a shellcode
ADVobfuscator - Obfuscation library based on C++11/14 and metaprogramming
ThreatCheck - Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
obfuscator
openmw - OpenMW is an open-source open-world RPG game engine that supports playing Morrowind. Main repo and issue tracker can be found here: https://gitlab.com/OpenMW/openmw/