Mr-Un1k0d3r/ThunderShell

This repository has been archived on 30/Mar/2023
Stars
770
Rank 59,000 (Top 2 %)
Language
Python
License
Other
Created about 7 years ago
Updated over 1 year ago

Mr-Un1k0d3r/ThunderShell

Mr-Un1k0d3r

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Python / C# Unmanaged PowerShell based RAT

ThunderShell

ThunderShell is a C# RAT that communicates via HTTP requests. All the network traffic is encrypted using a second layer of RC4 to avoid SSL interception and defeat network detection on the target system. RC4 is a weak cipher and is used to help obfuscate the traffic. HTTPS options should be used to provide integrity and strong encryption.

Information on how to use the tool and it's supported features is located on the Wiki.

Current beta version

Current release is 3.1.2

Credits

Mr.Un1k0d3r @MrUn1k0d3r

Tazz0 @Tazz019

RingZer0 Team 2017

EDRs

PowerLessShell

Run PowerShell command without invoking powershell.exe

DKMC

DKMC - Dont kill my cat - Malicious payload evasion tool

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

RedTeamPowershellScripts

Various PowerShell scripts that may be useful during red team exercise

MaliciousMacroGenerator

Malicious Macro Generator

RedTeamCSharpScripts

C# Script used for Red Team

RedTeamCCode

Red Team C code repo

CatMyPhish

Search for categorized domain

PoisonHandler

lateral movement techniques that can be used during red team exercises

MaliciousClickOnceGenerator

Quick Malicious ClickOnceGenerator for Red Team

ADHuntTool

official repo for the AdHuntTool (part of the old RedTeamCSharpScripts repo)

Windows-SignedBinary

.NetConfigLoader

.net config loader

Shellcoding

Shellcoding utilities

ATP-PowerShell-Scripts

Microsoft Signed PowerShell scripts

WindowsDllsExport

A list of all the DLLs export in C:\windows\system32\

AMSI-ETW-Patch

Patch AMSI and ETW

DLLsForHackers

Dll that can be used for side loading and other attack vector.

MaliciousDLLGenerator

DLL Generator for side loading attack

SCT-obfuscator

Cobalt Strike SCT payload obfuscator

RedTeamScripts

Repo with various Red Team scripts

Elevate-System-Trusted-BOF

Cookie-Graber-BOF

C or BOF file to extract WebKit master key to decrypt user cookie

SPFAbuse

SPF are not as strong as you may think. Red Team tool to send email on behalf of your target corp

RemoteProcessInjection

C# remote process injection utility for Cobalt Strike

Base64-Obfuscator

Simple PowerShell Base64 encoder to avoid detection of your malicious payload

SearchIPOwner

Search public IP owner through ARIN

RedTeamFSharp

Red Team Toolset written in F# (Experimental)

SideChannelAttack

Side Channel script

BOFCode

Bunch of BOF files

blog.mr.un1k0d3r.com

Mr.Un1k0d3r.com blog

MsGraphFunzy

Scripts to interact with Microsoft Graph APIs