Matt Graeber mattifestation

Popular repositories

1. PowerShellArsenal

   A PowerShell Module Dedicated to Reverse Engineering

   PowerShell 408 107

2. WMI_Backdoor

   A PoC WMI backdoor presented at Black Hat 2015

   PowerShell 102 41

3. DeviceGuardBypassMitigationRules

   A reference Device Guard code integrity policy consisting of FilePublisher deny rules for published Device Guard configuration bypasses

   88 23

4. PIC_Bindshell

   Position Independent Windows Shellcode Written in C

   PowerShell 77 32

5. PSReflect

   Easily define in-memory enums, structs, and Win32 functions in PowerShell

   PowerShell 75 31

6. PowerWorm

   Analysis, detection, and removal of the "Power Worm" PowerShell-based malware

   PowerShell 59 34