codewhitesec/LethalHTA

Stars
222
Rank 179,123 (Top 4 %)
Language
C#
License
MIT License
Created over 6 years ago
Updated about 2 years ago

codewhitesec/LethalHTA

codewhitesec

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Lateral Movement technique using DCOM and HTA

LethalHTA

Repo for our Lateral Movement technique using DCOM and HTA.

For details see our blog post https://codewhitesec.blogspot.com/2018/07/lethalhta.html.

Repo structure

CobaltStrike - The CobaltStrike integration of LethalHTADotNet
DotNet - VisualStudio project for LethalHTADotNet
Native - VisualStudio project for LethalHTA

HandleKatz

PIC lsass dumper using cloned handles

Lastenzug

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

ColdFusionPwn

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

UnmarshalPwn

POC for CVE-2018-0824

SysmonEnte

apollon

Proof-of-Concept to evade auditd by writing /proc/PID/mem

daphne

Proof-of-Concept to evade auditd by tampering via ptrace

RogueRemotingServer

qubes-keepass

rofi based frontend for KeePassXC running on Qubes OS

groovy-2.4.5-exploit

sap-p4-java-deserialization-exploit

Exploit for SAP P4 Java Deserialization (http://codewhitesec.blogspot.com/2017/05/sap-customers-make-sure-your-sapjvm-is.html)

qubes-yubioath

rofi based frontend for OTP related functionality of yubikey-manager running on Qubes OS