Dliv3

Venom

Venom - A Multi-hop Proxy for Penetration Testers

redis-rogue-server

Redis 4.x/5.x RCE

DomainBorrowing

Domain Borrowing PoC

SharpGPO

A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering

IoT-Security

IoT Security Papers

cve-2019-1040-scanner

rakkess

Review Access - kubectl plugin to show an access matrix for k8s server resources

HeaderLessPE

GoScan

GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

qemu_blog

A series of posts about QEMU internals

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

Virtualized_Learning

AggressiveProxy

Project to enumerate proxy configurations and generate shellcode from CobaltStrike

aquatone

A Tool for Domain Flyovers

CobaltPatch

Cobalt Strike Malleable Profile Inline Patch Template: A Position Independent Code (PIC) Code Template For Creating Shellcode That Can Be Appended In Stage / Post-Ex Blocks. Made for C Programmers

CrackMapExec

A swiss army knife for pentesting networks

cve-2020-0601

PoC for CVE-2020-0601

delete-self-poc

A way to delete a locked, or current running executable, on disk.

dnspython

a powerful DNS toolkit for python

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

learn-kvm

Qemu KVM(Kernel Virtual Machine)学习笔记

NGLite

A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

PrintNightmareCpp

PySocks

A SOCKS proxy client and wrapper for Python.

Rubeus

Trying to tame the three-headed dog.

strapdown-zeta

Instant and elegant Markdown documents in the browser, Git powered markdown wiki server, mathjax and theme support, and many more features!

tenet

A Trace Explorer for Reverse Engineers

Whisker

Whisker is a C# tool for taking over Active Directory user and computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding "Shadow Credentials" to the target account.