From 38d9d0b96a7f6f361f40caeed0fd7bf192cc9460 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Wed, 20 Apr 2022 23:34:46 +0700 Subject: [PATCH] Add: GhostPack/Invoke-Evasion to Defense Evasion section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index bd2b4d8..c8bb3c6 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1384,6 +1384,10 @@ Some tools can be categorized in more than one category. But because the current GetRektBoy724/TripleS Syscall Stub Stealer - Freshly steal Syscall stub straight from the disk + + GhostPack/Invoke-Evasion + PowerShell Obfuscation and Data Science + GoodstudyChina/APC-injection-x86-x64 injdrv is a proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC.