Kurosh Dabbagh Escalante

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for EDR user-mode hooking evasion.

Kudaes

UAC bypass by abusing RPC and debug objects.

Kudaes

Dynamically invoke arbitrary unmanaged code

Kudaes

Reuse open handles to dynamically dump LSASS.

Kudaes

Hide memory artifacts using ROP and hardware breakpoints.

Kudaes

Inject a shellcode in a remote process using Process Hollowing.

Kudaes

Call stack spoofing for Rust

Kudaes

Threadless Process Injection through entry point hijacking

Kudaes

Using fibers to run in-memory code.

Kudaes

Detect EDR's exceptions by inspecting processes' loaded modules

Kudaes