How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden (null terminated) registry key. This works by adding a null byte in front of the UNICODE_STRING key valuename.
Windows persistence toolkit written in C#. For detailed usage information on each technique, see the Wiki.
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification.
The main features of harmj0y/damp are: Persistence, Windows Persistence.
Open-source alternatives to harmj0y/damp include: outflanknl/sharphide — Just a nice persistence trick to confuse DFIR investigation. Uses NtSetValueKey native API to create a hidden (null… fireeye/sharpersist — Windows persistence toolkit written in C#. For detailed usage information on each technique, see the Wiki. antoniococo/sharpyshell — SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications. blackarrowsec/pivotnacci — Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which… eladshamir/whisker. ben0xa/doucme.