unicorn

shellcode injector

A tool for using a PowerShell downgrade attack and injecting shellcode into memory.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

GitHub

4k stars
231 watching
818 forks
Language: Python
last commit: 12 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
unicorn-engine/unicorn A multi-platform CPU emulator framework supporting various architectures and written in C. 7,710
magic-wormhole/magic-wormhole Transfer files between computers securely using a unique code-based system. 20,587
trustedsec/ptf A Python script designed to simplify the installation and management of penetration testing tools on Linux distributions. 5,179
hzqst/unicorn_pe An instrumentation project that emulates code execution for Windows PE files, especially packed ones. 805
liamg/traitor A tool for automatically exploiting vulnerabilities to gain elevated privileges on Linux systems 6,735
hackplayers/evil-winrm A tool providing a custom WinRM interface for post-exploitation purposes in Windows environments 4,605
microsoft/seal A C++ library for secure computations using homomorphic encryption 3,647
trustedsec/social-engineer-toolkit An open-source penetration testing framework designed to launch believable social engineering attacks. 11,136
theofficialflow/pppwn Exploits a known vulnerability in the PlayStation 4 to execute arbitrary code 2,633
jpillora/chisel A fast TCP/UDP tunnel over HTTP secured via SSH 13,747
s3cur3th1ssh1t/winpwn Automates reconnaissance and exploitation on Windows systems for internal penetration testing and AD security auditing. 3,383
rogandawes/p4wnp1_aloa A flexible platform for testing and exploiting physical systems 3,807
rogandawes/p4wnp1 A customizable USB attack platform utilizing a low-cost single-board computer for remote shell access and device control. 4,069
ufrisk/pcileech Software for exploiting vulnerabilities in computer systems to gain access to sensitive data and control system operations. 5,138
johnlatwc/pypowershellxray Decodes and analyzes encoded PowerShell scripts to identify potential shellcode and reverse-engineered APIs. 215