From bc0656e692cfa01667fdc7c6e422c37d7a2f41ea Mon Sep 17 00:00:00 2001 From: pe3zx Date: Wed, 18 Nov 2020 21:05:24 +0700 Subject: [PATCH] Add panagioto/SyscallHide --- Offensive.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/Offensive.md b/Offensive.md index f146f0b..dc09708 100644 --- a/Offensive.md +++ b/Offensive.md @@ -183,7 +183,7 @@ Some tools can be categorized in more than one category. But because the current monoxgas/sRDI Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode - + stephenfewer/ReflectiveDLLInjection Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process @@ -293,6 +293,10 @@ Some tools can be categorized in more than one category. But because the current fireeye/SharPersist Windows persistence toolkit written in C#. + + panagioto/SyscallHide + Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide. + slaeryan/MIDNIGHTTRAIN Covert Stage-3 Persistence Framework