rasta-mouse

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

Process Injection

Evasion kit for Cobalt Strike

Command and Control Framework written in C#

Open Source C&C Specification

Bypass AMSI by patching AmsiScanBuffer

Miscellaneous Tools

A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike

Source generator to add D/Invoke and indirect syscall methods to a C# project.

Port of Cobalt Strike's Process Inject Kit

Collection of Aggressor Scripts for Cobalt Strike

Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.

Abusing Exchange via EWS

Simple BOF to read the protection level of a process

D/Invoke port of UrbanBishop

Crystal Palace library for proxying Nt API calls via the Threadpool

Find jmp gadgets for call stack spoofing.

.NET implementation of Cobalt Strike's External C2 Spec

A Crystal Palace shared library to resolve & perform syscalls

Atomic test units for BOF execution