diff --git a/Offensive.md b/Offensive.md index 420fbfc..c9b71d4 100644 --- a/Offensive.md +++ b/Offensive.md @@ -410,6 +410,10 @@ Some tools can be categorized in more than one category. But because the current snovvcrash/peas Modified version of PEAS client for offensive operations + + timwhitez/Doge-Loader + 🐶Cobalt Strike Shellcode Loader by Golang + TheCruZ/kdmapper KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory @@ -538,8 +542,11 @@ Some tools can be categorized in more than one category. But because the current mobdk/Sigma - Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and - ZwCreateThreadEx + Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx + + + mobdk/Upsilon + Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used monoxgas/sRDI