moohax/Proof-Pudding: Copy cat model for Proofpoint
November 24, 2020 at 11:27:06 AM UTC - permalink -

- https://github.com/moohax/Proof-Pudding

phra's blog ~ Technical posts about InfoSec
November 11, 2020 at 11:47:49 AM UTC - permalink -

- https://iwantmore.pizza/posts/PEzor.html

Process Herpaderping | herpaderping
October 28, 2020 at 4:10:40 PM UTC - permalink -

- https://jxy-s.github.io/herpaderping/

PowerPoint Presentation - eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf
October 20, 2020 at 9:31:03 AM UTC - permalink -

- https://www.blackhat.com/docs/eu-17/materials/eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf

hfiref0x/UACME: Defeating Windows User Account Control
October 13, 2020 at 12:28:55 PM UTC - permalink -

- https://github.com/hfiref0x/UACME

ayoul3/reflect-pe: Reflectively load PE
July 29, 2020 at 2:03:29 PM UTC - permalink -

- https://github.com/ayoul3/reflect-pe

Covenant, Donut, TikiTorch
June 26, 2020 at 1:53:08 PM UTC - permalink -

- https://rastamouse.me/2019/08/covenant-donut-tikitorch/

batman / DarkArmour · GitLab
May 29, 2020 at 8:38:01 AM UTC - permalink -

- https://git.dylan.codes/batman/darkarmour

Bypassing AV via in-memory PE execution
May 29, 2020 at 8:37:37 AM UTC - permalink -

- https://blog.dylan.codes/bypassing-av-via/

Embedding EXE files into PowerShell scripts |
May 25, 2020 at 8:24:03 PM UTC - permalink -

- https://truesecdev.wordpress.com/2016/03/15/embedding-exe-files-into-powershell-scripts/

NoDistribute - Online Virus Scanner Without Result Distribution
May 25, 2020 at 3:02:39 PM UTC - permalink -

- https://nodistribute.com/