Commit Graph

Select branches

Hide Pull Requests

add_too_check_detection_urls

feat/add_missing_WDAC_bypasses

master

revert-170-fixes/mitre_attack_realignment

#1

#1

#101

#104

#105

#106

#107

#109

#110

#111

#112

#117

#118

#120

#121

#122

#125

#126

#127

#129

#130

#131

#132

#134

#135

#136

#140

#143

#144

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#156

#158

#159

#160

#161

#162

#163

#164

#166

#167

#168

#169

#17

#170

#174

#175

#176

#177

#178

#179

#180

#182

#183

#184

#185

#186

#187

#188

#189

#19

#191

#192

#193

#194

#195

#196

#197

#197

#198

#199

#2

#2

#20

#201

#202

#203

#204

#205

#206

#207

#209

#210

#211

#213

#214

#216

#217

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#233

#234

#235

#236

#236

#237

#238

#239

#240

#241

#242

#242

#244

#245

#25

#251

#252

#253

#255

#256

#259

#260

#261

#262

#263

#264

#265

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#274

#276

#277

#278

#28

#280

#281

#283

#284

#286

#288

#29

#290

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#300

#301

#303

#305

#306

#307

#308

#309

#310

#312

#314

#314

#315

#317

#319

#319

#32

#320

#321

#321

#322

#323

#324

#325

#326

#327

#329

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#340

#341

#341

#342

#343

#343

#344

#345

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#358

#359

#36

#360

#361

#362

#363

#364

#366

#367

#368

#369

#37

#370

#371

#371

#372

#372

#373

#373

#374

#375

#376

#377

#378

#379

#38

#381

#381

#382

#383

#384

#386

#387

#388

#388

#389

#39

#390

#391

#392

#394

#396

#398

#398

#40

#400

#401

#401

#402

#402

#403

#404

#405

#407

#408

#409

#410

#410

#411

#413

#414

#416

#417

#418

#419

#419

#42

#420

#420

#422

#424

#44

#45

#46

#48

#49

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#60

#61

#63

#64

#66

#67

#70

#71

#72

#73

#74

#75

#76

#77

#79

#80

#81

#82

#87

#88

#89

#90

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• 837d5778cd
  Merge pull request #1 from Lemonada/Add-Psr.exe Lemonada 2020-06-27 14:46:12 +03:00
• cfb5fcdf24
  Create psr.yml Lemonada 2020-06-27 14:45:03 +03:00
• 663724523f Update explorer.yml JPMinty 2020-06-24 21:15:40 +09:30
• dec26ada21 Create explorer.yml JPMinty 2020-06-24 21:09:59 +09:30
• ae3d9b9b6b
  sqldumper: minor fix mis-typed words Clément Notin 2020-06-15 23:33:34 +02:00
• b95fb7ed27 Added the IOCs Maxime Nadeau 2020-05-12 16:40:49 -04:00
• b8b265b397 Added ttdinject Maxime Nadeau 2020-05-12 16:31:47 -04:00
• 5de8d357b6 Added ttdinject.exe Maxime Nadeau 2020-05-12 16:24:49 -04:00
• aef4b06952
  Download for ftp.exe Alexandre ZANNI 2020-04-21 23:52:22 +02:00
• 9722cceb9e Added download example to wsl.exe Oddvar Moe 2020-03-25 11:33:02 +01:00
• 9f110bce07 Fixed missing octet in command Oddvar Moe 2020-03-25 11:24:54 +01:00
• 6ac04d73d7 Added examples to bash.exe Oddvar Moe 2020-03-25 11:08:13 +01:00
• f2fa2ef989 Added additional example to wsl.exe Oddvar Moe 2020-03-25 10:26:59 +01:00
• d67c8f5c11
  Update RegAsm to the correct permissions Chris "Lopi" Spehn 2020-03-20 11:51:21 -06:00
• e4face79af Using rundll32 to execute dll via SMB Martin Ingesen 2020-03-18 15:20:50 +01:00
• cce7c5ce3a Adjusted error in atbroker as per issue #47 Oddvar Moe 2020-03-17 11:08:47 +01:00
• 94d10799d3 Adjusted ilasm Oddvar Moe 2020-03-17 11:05:14 +01:00
• 187786469c
  Merge pull request #60 from LuxNoBulIshit/master Oddvar Moe 2020-03-17 10:57:53 +01:00
• dc3a211c89 Re-added ntdsutil Oddvar Moe 2020-03-17 10:55:59 +01:00
• 7a2ff4c250
  Create ilasm.yml LuxNoBu!!shit 2020-03-17 03:04:20 +02:00
• 4bef10b147 adjusted rasautou and removed ntdsutil Oddvar Moe 2020-03-16 20:10:17 +01:00
• 80295ef865
  Merge pull request #54 from ForensicITGuy/ntdsutil Oddvar Moe 2020-03-16 20:06:54 +01:00
• 81c363ac8a Adjustment to vbc.yml contribution Oddvar Moe 2020-03-16 19:55:27 +01:00
• 84c613b363
  Merge pull request #59 from leo1-1/master Oddvar Moe 2020-03-16 19:49:21 +01:00
• c7c93e9f95
  Create vbc.yml leo1-1 2020-02-27 17:13:07 +02:00
• acecdcf3df Netsh contribution from Freddie Bar-Smith - Thank you Oddvar Moe 2020-01-23 09:07:40 +01:00
• 94708ac5d6 Added links to obfuscation technique from Sailay(valen) on rundll32 Oddvar Moe 2020-01-23 08:57:43 +01:00
• e2f217c777 ntdsutil addition Tony M Lambert 2020-01-10 22:53:34 -06:00
• 99b87fdc13 Rasautou addition Tony M Lambert 2020-01-10 22:52:15 -06:00
• ecc94c2d09 Adjusted GfxDownloadWrapper Oddvar Moe 2020-01-07 09:08:13 +01:00
• 71aec7465b Minor adjustments to GfxDownloadWrapper.yml Oddvar Moe 2020-01-07 09:03:42 +01:00
• aada926e6f
  Merge pull request #52 from jesgal/patch-1 Oddvar Moe 2020-01-07 09:00:58 +01:00
• 22ef6bfc63 Added additional paths to CL_MutexVerifiers.ps1 - input from @shilpeshTrivedi Oddvar Moe 2020-01-07 08:45:25 +01:00
• 7030e00929 Capitalized dotnet name Oddvar Moe 2020-01-07 08:40:24 +01:00
• e1b36a25bd
  Rename dotnet.yml to Dotnet.yml Oddvar Moe 2020-01-07 08:37:36 +01:00
• acd38cec9e
  Merge pull request #49 from felamos/master Oddvar Moe 2020-01-07 08:32:35 +01:00
• c9e608ce0f
  Update GfxDownloadWrapper.yml jesgal 2019-12-27 17:11:30 +01:00
• a057cf2420
  Create GfxDownloadWrapper.yml jesgal 2019-12-27 17:02:34 +01:00
• 5cb17cfb26
  Create dotnet.yml Ayush Sahay 2019-12-11 15:53:12 +05:30
• 94a295213e Added Dump example to TTTracer.exe Oddvar Moe 2019-11-18 12:50:49 +01:00
• e0db5721ff Added Dump Example to TTTracer.exe Oddvar Moe 2019-11-18 12:47:51 +01:00
• 4663c13324 Adjustment Oddvar Moe 2019-11-05 15:47:20 +01:00
• 8d74b3062f Adjustment Oddvar Moe 2019-11-05 14:36:53 +01:00
• f9a7c42a85 Added TTTracer.exe - Thanks Onur Ulusoy Oddvar Moe 2019-11-05 12:12:46 +01:00
• 13093c879e Updated odbcconf.exe with discovery from @Hexacorn <3 Oddvar Moe 2019-10-24 10:01:44 +02:00
• cb9fa974dd
  Merge pull request #46 from felamos/patch-1 Oddvar Moe 2019-10-07 23:56:01 +02:00
• 7469812286
  Update and rename devtoolslauncher.yml to Devtoolslauncher.yml Oddvar Moe 2019-10-07 23:55:44 +02:00
• 1315c33ffc
  Merge pull request #45 from freddiebarrsmith/at_exe Oddvar Moe 2019-10-07 23:51:57 +02:00
• 8eb582de42
  Update At.yml Oddvar Moe 2019-10-07 23:51:26 +02:00
• 134b272567
  Update devtoolslauncher.yml Ayush Sahay 2019-10-07 12:15:47 +05:30
• 0fe0504622
  Update devtoolslauncher.yml Ayush Sahay 2019-10-04 10:20:38 +05:30
• 48ed8f7914
  Create devtoolslauncher.yml Ayush Sahay 2019-10-04 09:29:59 +05:30
• 9f47e26f16 Adding At.exe, for submission to LOLbas list, with proof of malware using it in wild :O freddie 2019-09-21 03:19:25 +01:00
• 32757cd0c3 Added Office binaries from jreegun to the project. Pull request 42 Oddvar Moe 2019-09-17 22:58:03 +02:00
• 0644ac30d7 Added Office binaries from jreegun to the project. Pull request 42 Oddvar Moe 2019-09-17 22:44:27 +02:00
• ed266c0983 Fixed some typos Oddvar Moe 2019-09-17 20:45:49 +02:00
• 8762fc5735 Acknowledgement fix for comsvcs Oddvar Moe 2019-09-16 09:50:01 +02:00
• 4ebf1ac4f7 Adjusted case sensitive type in yml file for Comsvcs Oddvar Moe 2019-09-16 09:44:14 +02:00
• 11c6c7c48d Adjusted Oddvar Moe 2019-09-16 09:38:05 +02:00
• f9f381d616
  Merge pull request #44 from plowsec/master Oddvar Moe 2019-09-16 09:33:40 +02:00
• dd5df7cf3e
  Add Comsvcs.yml: dump lsass via signed DLL. plowsec 2019-08-30 14:12:46 +02:00
• 5b63815c0a Updated update and squirrel with updaterollback parameter Oddvar Moe 2019-07-02 09:06:19 +02:00
• 8fcc9a105a Fixed spacing error Oddvar Moe 2019-06-28 18:07:24 +02:00
• 8528caf21d Added Acknowledgement to wsl.exe Oddvar Moe 2019-06-28 18:05:34 +02:00
• f77b3b4019 Fixed spacing issue Oddvar Moe 2019-06-28 17:53:45 +02:00
• dd545693da
  Merge pull request #40 from NotoriousRebel/master Oddvar Moe 2019-06-28 17:50:13 +02:00
• ff0155f599 Moved Wsl.yml location to OtherMSBinaries and added another example for possible usecases. NotoriousRebel 2019-06-28 09:20:56 -04:00
• e05ae6c051 Adjusted Update and Squirrel Oddvar Moe 2019-06-28 09:05:27 +02:00
• 3be3e5f3f8 Added link to reegun blog Oddvar Moe 2019-06-28 08:48:41 +02:00
• ff7dd5893b Added Wsl.yml NotoriousRebel 2019-06-27 15:39:12 -04:00
• fa72af4532
  Update README.md Oddvar Moe 2019-06-27 17:47:21 +02:00
• b284e46763 Added example to wscript Oddvar Moe 2019-06-27 17:27:31 +02:00
• 087b6367ca Fixed missing --- Oddvar Moe 2019-06-27 17:21:41 +02:00
• 60f55ee597 Adjusted Squirrel and Update Oddvar Moe 2019-06-27 17:12:23 +02:00
• eb46e1757b Adjusted template (some space errors) Oddvar Moe 2019-06-27 17:02:21 +02:00
• 1c42f7004a Adjusted update.yml Oddvar Moe 2019-06-27 17:01:34 +02:00
• 9ce9d8bc78
  Merge pull request #38 from jreegun/patch-1 Oddvar Moe 2019-06-27 16:46:11 +02:00
• 51ec7f6110
  Merge pull request #39 from jreegun/patch-2 Oddvar Moe 2019-06-27 16:45:45 +02:00
• 307c77fa4d
  Create update.yml jreegun 2019-06-27 20:26:24 +08:00
• c96d22b345
  Create squirrel.yml jreegun 2019-06-27 20:22:35 +08:00
• d26c01fa45 Reverted back Oddvar Moe 2019-06-27 13:49:52 +02:00
• 6338ac77a0 Remove % from Update.yml Oddvar Moe 2019-06-27 13:46:40 +02:00
• da3b619651 Adjusted new contributions Oddvar Moe 2019-06-27 13:42:06 +02:00
• a92b0e4d15 Adjusted new contributions Oddvar Moe 2019-06-27 13:41:07 +02:00
• 285e4d78d8 Adjusted new contributions Oddvar Moe 2019-06-27 13:40:03 +02:00
• 95e37b7cbf
  Merge pull request #36 from yeyintminthuhtut/master Oddvar Moe 2019-06-27 13:02:40 +02:00
• f076bdec3c
  Merge pull request #37 from Mr-Un1k0d3r/master Oddvar Moe 2019-06-27 13:02:30 +02:00
• 7ed8fb4d06
  Create Teams-update.yml Mr.Un1k0d3r 2019-06-26 14:12:02 -04:00
• fb5f164827
  Cmd.exe ADS r0lan 2019-06-26 18:33:11 +08:00
• af19552915
  Merge pull request #32 from bartblaze/master Oddvar Moe 2019-06-12 17:14:42 +02:00
• a511624f40
  Create RunCmd_X64.yml Bart 2019-06-08 19:55:06 +01:00
• f7748a08cc added Jsc.exe - Thanks @DissectMalware Oddvar Moe 2019-05-31 13:56:55 +02:00
• 106c359687 added Jsc.exe - Thanks @DissectMalware Oddvar Moe 2019-05-31 13:53:43 +02:00
• 8390246c37
  Merge pull request #29 from elisalem5389/master Oddvar Moe 2019-04-03 23:36:37 +02:00
• a7b6d2aad2 Add aswrundll.exe non microsoft lolbin Eli Salem 2019-03-20 10:53:11 +02:00
• 17e541f8c0 Added wsreset.exe - uac bypass Oddvar Moe 2019-03-18 08:44:53 +01:00
• 8806a9e0ee
  Added VSS use case bohops 2019-02-12 08:15:55 -05:00
• 69795dca7e Added fixes from https://github.com/sagishahar, typos in wmic and extexport Oddvar Moe 2019-02-01 18:38:35 +01:00
• 49276ae8e9
  Merge pull request #28 from sbruno/master Oddvar Moe 2019-02-01 11:14:29 +01:00
• cc8288c7d5 Fixing some typos Santiago Bruno 2019-01-28 13:39:23 -03:00