Flangvik/SharpDllProxy

Stars
523
Rank 84,684 (Top 2 %)
Language
C#
Created over 4 years ago
Updated over 1 year ago

Flangvik/SharpDllProxy

Flangvik

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

SharpDllProxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

Created together with a blog post for redteaming.co.uk -> https://redteaming.co.uk/2020/07/12/dll-proxy-loading-your-favorite-c-implant/

Usage

Profit

Credits

Launch Shellcode as a Thread via DllMain rather than a new process Vivek Ramachandran
Loading and Executing Shellcode From PE Resources

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

BetterSafetyKatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

TeamFiltration

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

NetLoader

Loads any C# binary in mem, patching AMSI + ETW.

AMSI.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

SharpProxyLogon

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

CobaltBus

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

AzureC2Relay

AzureC2Relay is an Azure Function that validates and relays Cobalt Strike beacon traffic by verifying the incoming requests based on a Cobalt Strike Malleable C2 profile.

DeployPrinterNightmare

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

RosFuscator

YouTube/Livestream project for obfuscating C# source code using Roslyn

SharpExfiltrate

Modular C# framework to exfiltrate loot over secure and trusted channels.

ObfuscatedSharpCollection

Attempt at Obfuscated version of SharpCollection

SharpAppLocker

C# port of the Get-AppLockerPolicy PS cmdlet

DLLSideloader

PowerShell script to generate "proxy" counterparts to easily perform DLL Sideloading

UAC-D-E-Rubber-Ducky

Python2 / BASH / VBS- UAC D&E Rubber Ducky

HIDAAF

Python - Human Interface Device Android Attack Framework

HTB-HDBadgeGenerator

HackTheBox High Definition Badge Generator

collector

Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.

CobaltStuff

AntminerController

C# - Allows for easy changing of pools across multiple miners.

MimiFud

BlackBox-0.1

The baddest box on the frequency

QRucible

Suprise at x33fcon

ProCheat

Cheating on Pro E-Sport LAN events made easy

StreamStuff

Contains stuff made during streams