diff --git a/Offensive.md b/Offensive.md index 7e0ade2..c615359 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1332,6 +1332,10 @@ Some tools can be categorized in more than one category. But because the current huntresslabs/evading-autoruns Slides and reference material from Evading Autoruns presentation at DerbyCon 7 (September 2017) + + Idov32/FunctionStomping + A new shellcode injection technique. Given as C++ header or standalone Rust program. + infosecn1nja/MaliciousMacroMSBuild Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.