BeichenDream

bottom

Yet another cross-platform graphical process/system monitor.

Complete-System-Design

This repository contains everything you need to become proficient in System Design

patchelf

A small utility to modify the dynamic linker and RPATH of ELF executables

marshalsec

Alcatraz

x64 binary obfuscator

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

Internal-Monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

RealBlindingEDR

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

glibc_version_header

Build portable Linux binaries without using an ancient distro

certsync

Dump NTDS with golden certificates and UnPAC the hash

dismember

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

DavRelayUp

DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the default settings).

SharpWeb

一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。

Proxy-Attackchain

Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)

S4UTomato

Escalate Service Account To LocalSystem via Kerberos

Mapping-Injection

Just another Windows Process Injection

CVE-2023-4911

PoC for CVE-2023-4911

SharpMove

.NET Project for performing Authenticated Remote Execution

Kerbeus-BOF

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

learn-java-asm

:bug: Java ASM

jar-obfuscator

Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具，支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式，支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式，支持方法和字段的隐藏，支持 NATIVE 层的 JVMTI 代码加密，配置简单，文档教程齐全，容易上手

electron_shell

Developing a more covert Remote Access Trojan (RAT) tool by leveraging Electron's features for command injection and combining it with remote control methods.

WSPCoerce

PoC to coerce authentication from Windows hosts using MS-WSP

EchoDrv

Exploitation of echo_driver.sys

wrapwrap

Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

CodeCave

A bunch of scripts and code i wrote.

XPost

A Post Exploitation Tool for High Value Systems

PerfExec

quickcert

A better way of querying certificate transparency logs

jdwphack

jdwphack