├── LICENSE ├── README.md ├── evasion ├── detect_hooks.c ├── direct_syscall.cpp ├── disable_instrumentation_callback.c └── fresh_copy.cpp ├── hooking ├── iat.cpp └── inline.cpp ├── miscellaneous └── iat_parser.cpp └── shellcode_samples ├── apc.cpp ├── classic.cpp ├── create_thread_injection.cpp ├── dll_classic.cpp ├── dll_injection.cpp ├── earlybird.cpp ├── fiber.cpp ├── mapview_injection.cpp └── thread_hijacking.c /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/README.md -------------------------------------------------------------------------------- /evasion/detect_hooks.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/evasion/detect_hooks.c -------------------------------------------------------------------------------- /evasion/direct_syscall.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/evasion/direct_syscall.cpp -------------------------------------------------------------------------------- /evasion/disable_instrumentation_callback.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/evasion/disable_instrumentation_callback.c -------------------------------------------------------------------------------- /evasion/fresh_copy.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/evasion/fresh_copy.cpp -------------------------------------------------------------------------------- /hooking/iat.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/hooking/iat.cpp -------------------------------------------------------------------------------- /hooking/inline.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/hooking/inline.cpp -------------------------------------------------------------------------------- /miscellaneous/iat_parser.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/miscellaneous/iat_parser.cpp -------------------------------------------------------------------------------- /shellcode_samples/apc.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/apc.cpp -------------------------------------------------------------------------------- /shellcode_samples/classic.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/classic.cpp -------------------------------------------------------------------------------- /shellcode_samples/create_thread_injection.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/create_thread_injection.cpp -------------------------------------------------------------------------------- /shellcode_samples/dll_classic.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/dll_classic.cpp -------------------------------------------------------------------------------- /shellcode_samples/dll_injection.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/dll_injection.cpp -------------------------------------------------------------------------------- /shellcode_samples/earlybird.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/earlybird.cpp -------------------------------------------------------------------------------- /shellcode_samples/fiber.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/fiber.cpp -------------------------------------------------------------------------------- /shellcode_samples/mapview_injection.cpp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/mapview_injection.cpp -------------------------------------------------------------------------------- /shellcode_samples/thread_hijacking.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/matthieu-hackwitharts/Win32_Offensive_Cheatsheet/HEAD/shellcode_samples/thread_hijacking.c --------------------------------------------------------------------------------