138 Commits

Author	SHA1	Message	Date
Oddvar Moe	cce7c5ce3a	Adjusted error in atbroker as per issue #47	2020-03-17 11:08:47 +01:00
Oddvar Moe	94d10799d3	Adjusted ilasm	2020-03-17 11:05:14 +01:00
Oddvar Moe	187786469c	Merge pull request #60 from LuxNoBulIshit/master ... Create ilasm.yml	2020-03-17 10:57:53 +01:00
Oddvar Moe	dc3a211c89	Re-added ntdsutil	2020-03-17 10:55:59 +01:00
LuxNoBu!!shit	7a2ff4c250	Create ilasm.yml	2020-03-17 03:04:20 +02:00
Oddvar Moe	4bef10b147	adjusted rasautou and removed ntdsutil	2020-03-16 20:10:17 +01:00
Oddvar Moe	80295ef865	Merge pull request #54 from ForensicITGuy/ntdsutil ... Ntdsutil & Rasautou addition	2020-03-16 20:06:54 +01:00
Oddvar Moe	81c363ac8a	Adjustment to vbc.yml contribution	2020-03-16 19:55:27 +01:00
leo1-1	c7c93e9f95	Create vbc.yml	2020-02-27 17:13:07 +02:00
Oddvar Moe	acecdcf3df	Netsh contribution from Freddie Bar-Smith - Thank you	2020-01-23 09:07:40 +01:00
Oddvar Moe	94708ac5d6	Added links to obfuscation technique from Sailay(valen) on rundll32	2020-01-23 08:57:43 +01:00
Tony M Lambert	e2f217c777	ntdsutil addition	2020-01-10 22:53:34 -06:00
Tony M Lambert	99b87fdc13	Rasautou addition	2020-01-10 22:52:15 -06:00
Oddvar Moe	ecc94c2d09	Adjusted GfxDownloadWrapper	2020-01-07 09:08:13 +01:00
Oddvar Moe	71aec7465b	Minor adjustments to GfxDownloadWrapper.yml	2020-01-07 09:03:42 +01:00
Oddvar Moe	aada926e6f	Merge pull request #52 from jesgal/patch-1 ... Create GfxDownloadWrapper.yml	2020-01-07 09:00:58 +01:00
Oddvar Moe	22ef6bfc63	Added additional paths to CL_MutexVerifiers.ps1 - input from @shilpeshTrivedi	2020-01-07 08:45:25 +01:00
Oddvar Moe	7030e00929	Capitalized dotnet name	2020-01-07 08:40:24 +01:00
Oddvar Moe	e1b36a25bd	Rename dotnet.yml to Dotnet.yml	2020-01-07 08:37:36 +01:00
Oddvar Moe	acd38cec9e	Merge pull request #49 from felamos/master ... Create dotnet.yml	2020-01-07 08:32:35 +01:00
jesgal	c9e608ce0f	Update GfxDownloadWrapper.yml	2019-12-27 17:11:30 +01:00
jesgal	a057cf2420	Create GfxDownloadWrapper.yml ... GfxDownloadWrapper.exe downloads the content that returns <URL> and writes it to the file <DESTINATION FILE PATH>. The binary is signed by "Microsoft Windows Hardware", "Compatibility Publisher", "Microsoft Windows Third Party Component CA 2012", "Microsoft Time-Stamp PCA 2010", "Microsoft Time-Stamp Service".	2019-12-27 17:02:34 +01:00
Ayush Sahay	5cb17cfb26	Create dotnet.yml	2019-12-11 15:53:12 +05:30
Oddvar Moe	94a295213e	Added Dump example to TTTracer.exe	2019-11-18 12:50:49 +01:00
Oddvar Moe	e0db5721ff	Added Dump Example to TTTracer.exe	2019-11-18 12:47:51 +01:00
Oddvar Moe	4663c13324	Adjustment	2019-11-05 15:47:20 +01:00
Oddvar Moe	8d74b3062f	Adjustment	2019-11-05 14:36:53 +01:00
Oddvar Moe	f9a7c42a85	Added TTTracer.exe - Thanks Onur Ulusoy	2019-11-05 12:12:46 +01:00
Oddvar Moe	13093c879e	Updated odbcconf.exe with discovery from @Hexacorn <3	2019-10-24 10:01:44 +02:00
Oddvar Moe	cb9fa974dd	Merge pull request #46 from felamos/patch-1 ... Create devtoolslauncher.yml	2019-10-07 23:56:01 +02:00
Oddvar Moe	7469812286	Update and rename devtoolslauncher.yml to Devtoolslauncher.yml	2019-10-07 23:55:44 +02:00
Oddvar Moe	8eb582de42	Update At.yml	2019-10-07 23:51:26 +02:00
Ayush Sahay	134b272567	Update devtoolslauncher.yml	2019-10-07 12:15:47 +05:30
Ayush Sahay	0fe0504622	Update devtoolslauncher.yml	2019-10-04 10:20:38 +05:30
Ayush Sahay	48ed8f7914	Create devtoolslauncher.yml	2019-10-04 09:29:59 +05:30
freddie	9f47e26f16	Adding At.exe, for submission to LOLbas list, with proof of malware using it in wild :O	2019-09-21 03:19:25 +01:00
Oddvar Moe	32757cd0c3	Added Office binaries from jreegun to the project. Pull request 42	2019-09-17 22:58:03 +02:00
Oddvar Moe	0644ac30d7	Added Office binaries from jreegun to the project. Pull request 42	2019-09-17 22:44:27 +02:00
Oddvar Moe	ed266c0983	Fixed some typos	2019-09-17 20:45:49 +02:00
Oddvar Moe	8762fc5735	Acknowledgement fix for comsvcs	2019-09-16 09:50:01 +02:00
Oddvar Moe	4ebf1ac4f7	Adjusted case sensitive type in yml file for Comsvcs	2019-09-16 09:44:14 +02:00
Oddvar Moe	11c6c7c48d	Adjusted	2019-09-16 09:38:05 +02:00
plowsec	dd5df7cf3e	Add Comsvcs.yml: dump lsass via signed DLL.	2019-08-30 14:12:46 +02:00
Oddvar Moe	5b63815c0a	Updated update and squirrel with updaterollback parameter	2019-07-02 09:06:19 +02:00
Oddvar Moe	8fcc9a105a	Fixed spacing error	2019-06-28 18:07:24 +02:00
Oddvar Moe	8528caf21d	Added Acknowledgement to wsl.exe	2019-06-28 18:05:34 +02:00
Oddvar Moe	f77b3b4019	Fixed spacing issue	2019-06-28 17:53:45 +02:00
Oddvar Moe	dd545693da	Merge pull request #40 from NotoriousRebel/master ... Create Wsl.yml	2019-06-28 17:50:13 +02:00
NotoriousRebel	ff0155f599	Moved Wsl.yml location to OtherMSBinaries and added another example for possible usecases.	2019-06-28 09:20:56 -04:00
Oddvar Moe	e05ae6c051	Adjusted Update and Squirrel	2019-06-28 09:05:27 +02:00