3gstudent/CLR-Injection

Stars
170
Rank 223,357 (Top 5 %)
Language Batchfile
Created over 7 years ago
Updated over 3 years ago

3gstudent/CLR-Injection

3gstudent

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Use CLR to inject all the .NET apps

CLR-Persistence

Use CLR to inject all the .NET apps

Inspired by @subTee
No need Administrator rights
Need reboot or log off and re-logon
Inject all the .NET apps
Support x86 and x64

POC:

When the system calls the .Net apps by default, the backdoor triggers automatically.

:D

More details:

https://3gstudent.github.io/Use-CLR-to-maintain-persistence

Pentest-and-Development-Tips

A collection of pentest and development tips

Homework-of-C-Language

C/C++ code examples of my blog.

Worse-PDF

Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.

Homework-of-Python

Python codes of my blog.

List-RDP-Connections-History

Use powershell to list the RDP Connections History of logged-in users or all users

Eventlogedit-evtx--Evolution

Remove individual lines from Windows XML Event Log (EVTX) files

Javascript-Backdoor

Learn from Casey Smith @subTee

Invoke-BuildAnonymousSMBServer

Use to build an anonymous SMB file server.

msbuild-inline-task

Homework-of-C-Sharp

C Sharp codes of my blog.

pyKerbrute

Use python to perform Kerberos pre-auth bruteforcing

Inject-dll-by-APC

Asynchronous Procedure Calls

SharpRDPCheck

Use to check the valid account of the Remote Desktop Protocol(Support plaintext and ntlmhash)

Inject-dll-by-Process-Doppelganging

Process Doppelgänging

backup-3gstudent.github.io

Smbtouch-Scanner

Automatically scan the inner network to detect whether they are vulnerable.

ntfsDump

Use to copy a file from an NTFS partitioned volume by reading the raw volume and parsing the NTFS structures.

Homework-of-Powershell

powershell codes of my blog.

Use-COM-objects-to-bypass-UAC

Office-Persistence

Use powershell to test Office-based persistence methods

Windows-User-Clone

Create a hidden account

Windows-EventLog-Bypass

Use subProcessTag Value From TEB to identify Event Log Threads

APT34-Jason

Use to perform Microsoft exchange account brute-force.

pyXSSPlatform

Used to build an XSS platform on the command line.

CVE-2017-8464-EXP

Support x86 and x64

bitsadminexec

Use bitsadmin to maintain persistence and bypass Autoruns

Code-Execution-and-Process-Injection

Powershell to CodeExecution and ProcessInjection

Shellcode-Generater

No inline asm,support x86/x64

test

CreateRemoteThread

From 32-bit process to 64-bit process

PasswordFilter

2 ways of Password Filter DLL to record the plaintext password

Dump-Clear-Password-after-KB2871997-installed

From-System-authority-to-Medium-authority

Penetration test

Waitfor-Persistence

Use Waitfor.exe to maintain persistence

Bypass-Windows-AppLocker

NinjaCopy

Powershell to copy ntds.dit

COM-Object-hijacking

use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)

3gstudent.github.io

Winpcap_Install

Auto install WinPcap on Windows(command line)

ewsManage

My exercise of using Exchange Web Service(EWS)

HiddenNtRegistry

Use NT Native Registry API to create a registry that normal user can not query.

Homework-of-Go

Go code examples of my blog.

signtools

From Windows SDK

Eventlogedit-evt--General

Remove individual lines from Windows Event Viewer Log (EVT) files

PNG-Steganography

Steganography Payload

easBrowseSharefile

Use to browse the share file by eas(Exchange Server ActiveSync)

Bypass-McAfee-Application-Control--Code-Execution

Smallp0wnedShell

Small modification version of p0wnedShell

ListInstalledPrograms

List the programs that the current Windows system has installed

AutoIt-Keylogger

Hide-Process-by-kd.exe

powershell to hide process by kd.exe

NodeJS-Downloader

An example of a downloader written in NodeJS.

Use-msxsl-to-bypass-AppLocker

Learn from Casey Smith@subTee

GetExpiredDomains

Search for available domain from expireddomains.net

ExcelDllLoader

Execute DLL via the Excel.Application object's RegisterXLL() method

Add-Dll-Exports

Use to generate DLL through Visual Studio

Execute-CSharp-From-XSLT-TEST

Writeup

interesting analysis

PNG_stego-test

SendMail-with-Attachments

Use powershell to send mail

Catch-specified-file-s-handle

Enumerate all processes and get specified file's handle,then close it.

pdf

IE-BHO-POSTdata-Logger

A sample IE BHO for logging Internet Explorer's POST data.

WanaCrypt0r-Reverse-Analysis

Record my reverse analysis of WanaCrypt0r

bgi-creater

Use BGInfo to bypass Application Whitelisting

Get-Wlan-Keys

Powershell to get wlan keys

Homework-of-Java

Java codes of my blog

3gstudent

regsvr32-test

Test-Exploit-for-Joomla-3.4.4-3.6.4

Test if the website allows user registration

BlogPic