unicorn

shellcode injector

A tool for using a PowerShell downgrade attack and injecting shellcode into memory.

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

GitHub

4k stars
231 watching
815 forks
Language: Python
last commit: 10 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
unicorn-engine/unicorn A multi-platform CPU emulator framework supporting various architectures and written in C. 7,647
magic-wormhole/magic-wormhole Transfer files between computers securely using a unique code-based system. 20,425
trustedsec/ptf A Python script designed to simplify the installation and management of penetration testing tools on Linux distributions. 5,159
hzqst/unicorn_pe An instrumentation project that emulates code execution for Windows PE files, especially packed ones. 787
liamg/traitor A tool for automatically exploiting vulnerabilities to gain elevated privileges on Linux systems 6,689
hackplayers/evil-winrm A tool providing a custom WinRM interface for post-exploitation purposes in Windows environments 4,537
microsoft/seal A C++ library for secure computations using homomorphic encryption 3,611
trustedsec/social-engineer-toolkit An open-source penetration testing framework designed to launch believable social engineering attacks. 11,000
theofficialflow/pppwn Exploits a known vulnerability in the PlayStation 4 to execute arbitrary code 2,604
jpillora/chisel A fast TCP/UDP tunnel over HTTP secured via SSH 13,601
s3cur3th1ssh1t/winpwn Automates reconnaissance and exploitation on Windows systems for internal penetration testing and AD security auditing. 3,336
rogandawes/p4wnp1_aloa A flexible platform for testing and exploiting physical systems 3,775
rogandawes/p4wnp1 A customizable USB attack platform utilizing a low-cost single-board computer for remote shell access and device control. 4,038
ufrisk/pcileech Software for exploiting vulnerabilities in computer systems to gain access to sensitive data and control system operations. 5,011
johnlatwc/pypowershellxray Decodes and analyzes encoded PowerShell scripts to identify potential shellcode and reverse-engineered APIs. 215