-
Bad Sector Labs
- blog.badsectorlabs.com
- https://ludus.cloud
- @badsectorlabs
Lists (5)
Sort Name ascending (A-Z)
Stars
- All languages
- ASP.NET
- AppleScript
- Assembly
- AutoIt
- Awk
- Batchfile
- Bicep
- BlitzBasic
- Boo
- C
- C#
- C++
- CSS
- CoffeeScript
- Crystal
- Cypher
- Dart
- Dockerfile
- Earthly
- Elixir
- F#
- GLSL
- Gherkin
- Go
- HCL
- HTML
- Hack
- Haskell
- Inno Setup
- Java
- JavaScript
- Jinja
- Jupyter Notebook
- Kotlin
- LLVM
- Less
- Lua
- Makefile
- Max
- Mojo
- Nim
- OCaml
- Objective-C
- Objective-C++
- Open Policy Agent
- OpenSCAD
- PHP
- Pascal
- Perl
- PostScript
- PowerShell
- Python
- Rich Text Format
- Roff
- Ruby
- Rust
- SCSS
- Scala
- Shell
- Slash
- Smali
- Smarty
- Solidity
- Svelte
- Swift
- SystemVerilog
- TSQL
- TypeScript
- VBA
- VBScript
- Vala
- Vim Script
- Visual Basic
- Visual Basic .NET
- Vue
- XSLT
- YARA
- Zeek
- Zig
This code shows how to silently install Web Store extensions on Google Chrome on MacOS
SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.
The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.
A beacon object file implementation of PoolParty Process Injection Technique.
A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, function hooking or Import Address Table (IAT) modification.
Open source templates you can use to bootstrap your security programs
VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allo…
Create your own AirTag with OpenHaystack, but without the need to own an Apple device
poc for CVE-2024-38063 (RCE in tcpip.sys)
Module for creating GPOs in AD, that add groups in Local Admins or RDP Users on specified computers
A simple and fast anti-censorship tool written in Go
Dump lsass using only NTAPIS running 3 programs to create 3 JSON and 1 ZIP file... and generate the Minidump later!
Make everyone in your VLAN ASRep roastable
🖧🔍 WIFI / LAN intruder detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.
Azure administrative tiering based on known attack paths
HookChain: A new perspective for Bypassing EDR Solutions
MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
When good OAuth apps go rogue. Documents observed OAuth application tradecraft
A VSCode plugin to assist with BOF development.
DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the ori…
Leak of any user's NetNTLM hash. Fixed in KB5040434
BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions