Projects

TaskPwn

A python script to remotely enumerate scheduled tasks using (local) Administrator privileges. It will enumerate any scheduled and provide the username if it's a domain user and the users groups.

HTTP

• Simple HTTP(s) File server with upload support for pen-testing CTFs/Labs.

AMSI-Patch

• An AMSI (AmsiScanBuffer) bypass.
• Introduced me to concepts such as: API Hooking, Memory Patching.

HTTPDropper

• Basic HTTP Payload dropper, download's raw shellcode from a remote HTTP server and injects it into the current process via CreateThread.
• Created purely to bypass defender inside the HTB ProLab Cybernetics.
• Introduced me to concepts such as: Process Injection