From 9cd010191ea78f179b28f0b89472c7eec6aa2aed Mon Sep 17 00:00:00 2001 From: pe3zx Date: Sun, 22 Aug 2021 17:44:19 +0700 Subject: [PATCH] Add: rmdavy/HeapsOfFun to Defense Evasion section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 6488157..d52f4b7 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1198,6 +1198,10 @@ Some tools can be categorized in more than one category. But because the current RedCursorSecurityConsulting/PPLKiller Tool to bypass LSA Protection (aka Protected Process Light) + + rmdavy/HeapsOfFun + AMSI Bypass Via the Heap + secretsquirrel/SigThief Stealing Signatures and Making One Invalid Signature at a Time