Oddvar Moe
|
adcb7e0c57
|
Merge pull request #150 from elliotkillick/OfflineScannerShell
Create OfflineScannerShell.yml
|
2021-10-22 16:28:33 +02:00 |
|
Oddvar Moe
|
c04d90c533
|
Merge pull request #149 from elliotkillick/WorkFolders
Create WorkFolders.yml
|
2021-10-22 16:26:50 +02:00 |
|
Oddvar Moe
|
8c1b97629b
|
Merge pull request #146 from elliotkillick/PrintBrm
Create PrintBrm.yml
|
2021-10-22 16:21:21 +02:00 |
|
Oddvar Moe
|
d9e31e2291
|
Rename fltMC.yml to FltMC.yml
|
2021-10-22 16:04:27 +02:00 |
|
Oddvar Moe
|
6bda2344eb
|
Rename certoc.yml to Certoc.yml
|
2021-10-22 16:04:12 +02:00 |
|
Oddvar Moe
|
e32f944030
|
Merge pull request #162 from esebese/master
Create certoc.yml
|
2021-10-22 16:02:20 +02:00 |
|
Oddvar Moe
|
985bda094e
|
Merge pull request #164 from eral4m/master
Create Stordiag.yml
|
2021-10-22 15:58:35 +02:00 |
|
Oddvar Moe
|
30a9f90f5f
|
Update Stordiag.yml
|
2021-10-22 15:56:52 +02:00 |
|
Oddvar Moe
|
a55e2249c1
|
Merge branch 'master' into fixing-yaml-issues
|
2021-10-22 14:53:09 +02:00 |
|
Elliot Killick
|
a1d7fd00c9
|
Acknowledge John Carroll and their resource
|
2021-10-21 05:36:18 -04:00 |
|
eral4m
|
8b49ca2054
|
Update Stordiag.yml
|
2021-10-21 10:30:54 +01:00 |
|
eral4m
|
b723258dbf
|
Update Stordiag.yml
|
2021-10-21 10:30:31 +01:00 |
|
eral4m
|
6da5480936
|
Update Stordiag.yml
|
2021-10-21 10:14:04 +01:00 |
|
eral4m
|
fd2a31b43b
|
Create Stordiag.yml
|
2021-10-21 10:00:47 +01:00 |
|
Elliot Killick
|
6fb1882a16
|
Add resources section
|
2021-10-18 23:38:45 -04:00 |
|
Ensar Şamil
|
6b6fd3fd62
|
Create certoc.yml
|
2021-10-07 13:31:45 +03:00 |
|
root
|
b5357cdec0
|
Adding app-ctrl bypass bins and a few lolscripts
|
2021-09-26 23:31:30 -04:00 |
|
bohops
|
3475ce1213
|
Merge pull request #158 from JohnLaTwC/patch-1
Add lolbin for fltMC.exe
|
2021-09-25 22:47:30 -04:00 |
|
bohops
|
6c20e750e8
|
Merge pull request #144 from defensivedepth/patch-1
Fix ART link
|
2021-09-25 22:22:42 -04:00 |
|
bohops
|
198b421d15
|
Merge pull request #130 from whickey-r7/patch-3
Create IMEWDBLD.yml
|
2021-09-25 22:07:23 -04:00 |
|
John Lambert
|
ecbc2f817f
|
Add lolbin for fltMC.exe
Used by redteams for defense evasion to disable drivers used by agents like sysmon
https://www.darkoperator.com/blog/2018/10/5/operating-offensively-against-sysmon
https://github.com/oddcod3/Phantom-Evasion/blob/master/Modules/post-exploitation/Postex_CMD_UnloadSysmonDriver_windows.py
|
2021-09-18 17:43:59 -07:00 |
|
Elliot Killick
|
692a3bf4c2
|
Remove .exe from command and increase specificity
|
2021-08-26 12:49:43 -04:00 |
|
Elliot Killick
|
34af96f564
|
Remove .exe from command
|
2021-08-26 12:21:34 -04:00 |
|
Elliot Killick
|
084fb83984
|
Remove .exe from command and increase specificity
|
2021-08-26 12:07:04 -04:00 |
|
bohops
|
f51a70c03e
|
Merge pull request #143 from Efraim-Kaplan/patch-1
Fixed Typo
|
2021-08-26 09:08:40 -04:00 |
|
Elliot Killick
|
26a15f55cf
|
Create OfflineScannerShell.yml
|
2021-08-16 19:46:47 -04:00 |
|
Elliot Killick
|
95baee85fd
|
Create WorkFolders.yml
|
2021-08-16 19:42:32 -04:00 |
|
Elliot Killick
|
63af8cca3b
|
Add resources section and improve formatting
|
2021-07-10 11:54:35 -04:00 |
|
Josh Brower
|
87c3319ad4
|
Fix ART link
|
2021-07-06 13:56:24 -04:00 |
|
Efraim-Kaplan
|
ebf494ae4d
|
FIxed typo
Replaced "handeling" with "handling".
|
2021-07-02 17:33:53 -04:00 |
|
Elliot Killick
|
8f705bb7a4
|
Create PrintBrm.yml
New lolbin for zipping & unzipping to and from UNC paths and ADS. The zip file could also serve as a useful form of obfuscation for evading detection.
|
2021-06-22 02:11:27 +00:00 |
|
Parker McGee
|
bbf14cf4b9
|
Fix a typo in Findstr.yml
`finstr.exe` should be `findstr.exe`
|
2021-03-20 16:40:37 -04:00 |
|
whickey-r7
|
782bc68c7c
|
Create IMEWDBLD.yml
|
2021-03-05 11:35:06 -05:00 |
|
Oddvar Moe
|
7c1a4a7959
|
Merge pull request #125 from wokis/master
Added detection by Microsoft Defender Antivirus as Behavior:Win32/UACBypassExp.T!gen
|
2021-01-21 22:58:24 +01:00 |
|
Oddvar Moe
|
b79a48f082
|
Fixed Category on pnputil
|
2021-01-21 22:54:58 +01:00 |
|
Oddvar Moe
|
2406d99f33
|
Rename pnputil.yml to Pnputil.yml
Casing
|
2021-01-21 22:49:19 +01:00 |
|
Oddvar Moe
|
64914b641c
|
Adjusted error on pnputil yml file
|
2021-01-21 22:48:05 +01:00 |
|
Oddvar Moe
|
5b9c4f63dc
|
Merge pull request #118 from LuxNoBulIshit/master
Pnputil.exe
|
2021-01-21 22:42:40 +01:00 |
|
Oddvar Moe
|
394d3c66f9
|
Merge pull request #112 from zeroSteiner/patch-1
Update the affected operating systems for SyncAppvPublishingServer
|
2021-01-21 22:35:50 +01:00 |
|
Oddvar Moe
|
97176a0a07
|
Merge pull request #110 from whickey-r7/patch-2
Create AppInstaller.yml
|
2021-01-21 22:29:35 +01:00 |
|
Oddvar Moe
|
6774d228a5
|
Merge pull request #109 from unexpectedBy/patch-2
Create DataSvcUtil.yml
|
2021-01-21 22:24:02 +01:00 |
|
wokis
|
00935f154e
|
Update Wsreset.yml
Added detection by Microsoft Defender Antivirus as Behavior:Win32/UACBypassExp.T!gen
|
2021-01-20 14:47:23 +01:00 |
|
Wietze
|
5012f95152
|
Fix Code_Sample field
|
2021-01-10 15:49:30 +00:00 |
|
Wietze
|
14dca38278
|
Standardise date formats (see https://yaml.org/type/timestamp.html)
|
2021-01-10 15:04:52 +00:00 |
|
LuxNoBu!!shit
|
0d819439c5
|
Create pnputil.exe
|
2020-12-25 12:14:15 -08:00 |
|
Spencer McIntyre
|
deb249042b
|
Update the affected operating systems for SyncAppvPublishingServer
|
2020-12-08 15:32:35 -05:00 |
|
whickey-r7
|
b381d04faf
|
Create AppInstaller.yml
New lolbin for downloading files in Windows 10.
|
2020-12-02 11:35:49 -05:00 |
|
unload
|
bfe248b07e
|
Create DataSvcUtil.yml
Another data exfil way with lolbins
|
2020-12-01 22:57:09 -03:00 |
|
Nasreddine Bencherchali
|
15d5ff302d
|
Create Dllhost.yml
|
2020-11-07 14:22:24 +01:00 |
|
Conor Richard
|
d15172284a
|
Merge pull request #101 from leo1-1/master
added command to certutil
|
2020-10-26 19:44:53 -04:00 |
|