Hikmet Kuşburnu
@occamsxor
facing cyber insecurities
ID: 179550031
17-08-2010 15:30:47
173 Tweet
207 Followers
1,1K Following
I developed the Nim version of the new Parallel Syscalls technique which loads the unhooked version of ntdll. I want to thank Peter Winter-Smith for such an interesting method. All PR's are always welcome. github.com/frkngksl/Paral…
I implemented the pure Nim version of the COFFLoader project to run COFF and BOF files. I want to thank @Yas_o_h for help and guidance, also Kevin Haubris and TrustedSec for their fantastic and educative research. You can find the repository below. github.com/frkngksl/NiCOFF
Another technique which is Call Stack Spoofing is in Nim right now! I developed the pure Nim version of the Call Stack Spoofing method thanks to William Burgess 's PoC and blogpost. You can find the repository below. github.com/frkngksl/Nimic…
Source code for the tool is now public: github.com/OccamsXor/Drag… by Hikmet Kuşburnu Highly recommended!
I developed a Fileless Lateral Movement tool called NimExec. It changes service configuration to execute the payload via manually crafted RPC packets. It's the improved version of Julio Ureña 's SharpNoPSExec with Pass the Hash support. Enjoy! #infosec github.com/frkngksl/NimEx…