From b0b0fb97a2e70430cd696520b3ab11800e0d655c Mon Sep 17 00:00:00 2001 From: pe3zx Date: Tue, 2 Jan 2024 16:11:18 +0700 Subject: [PATCH] Add: hackerhouse-opensource/SignToolEx to Defense Evasion section --- Offensive.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/Offensive.md b/Offensive.md index 7a0a1f9..911ad41 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1496,6 +1496,10 @@ Some tools can be categorized in more than one category. But because the current GoodstudyChina/APC-injection-x86-x64 injdrv is a proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC. + + hackerhouse-opensource/SignToolEx + Patching "signtool.exe" to accept expired certificates for code-signing. + HackOvert/AntiDBG A bunch of Windows anti-debugging tricks for x86 and x64.