Process Injection - Shellcode Injection ProcInject.c #include <Windows.h> #include <stdio.h> #include <TlHelp32.h> #include <ctype.h> // for tolower /* msfvenom -p ...

Local Mapping Injection LocalMappingInjection.c #include <Windows.h> #include <stdio.h> // notepad.exe unsigned char shellcode[] = { 0xfc,0x48,0x83,0xe4,0xf0,0xe8, 0xc0,0x00,0x00,0x0...

IAT Hiding - Custom GetProcAddress Custom-GetProcAddress.c #include <Windows.h> #include <stdio.h> #include <winternl.h> FARPROC CustomGetProcAddress(_In_ HMODULE hModule, _In_...

AntiDebugging Techniques.c #include <Windows.h> #include <stdio.h> #include <TlHelp32.h> #include "structs.h" /* IsdebuggerPresent() API, returns TRUE if a debugger is being a...

AntiDebugging-SelfDeletion SelfDeletion.c #include <Windows.h> #include <stdio.h> #include <intrin.h> #define NEW_STREAM ":N0xshell" #define RAND_MAX 0x7FFF // Static -> on...

Anti-Virtual-Techniques Techniques.c #include <Windows.h> #include <stdio.h> #include <Shlwapi.h> #include <Psapi.h> #pragma comment(lib, "Shlwapi.lib") // Detect VM by...

Anti-Virtual-APIHammering api-hammering.c #include <Windows.h> #include <stdio.h> #define TMP L"N0xShell.tmp" #define STRESSFACTOR(i) ((int)(i) * 196) #define ERR(WinAPI) printf("[!...

*Logging is a Windows Active Directory machine centered around a realistic scenario you’d actually encounter on an internal pentest: credentials buried in log files, an overprivileged service accou...

Machine Info Redelegate is a hard-difficultly Windows machine that starts with Anonymous FTP access, which allows the attacker to download sensitive Keepass Database files. The attacker then discov...

Phantom is a medium difficulty Windows machine which highlights AD exploitation. Initial enumeration reveals a publicly accessible SMB Share containing an email file with a base64 encoded PDF attac...