Hhhhelix

0xdarkvortex-MalwareDevelopment

This repo will contain code snippets for blogs: Malware on Steroids written by me at https://scriptdotsh.com/index.php/category/malware-development/

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

AngelSword

Python3编写的CMS漏洞检测框架

AV_Evasion_Tool

掩日 - 免杀执行器生成工具

avet

AntiVirus Evasion Tool

AVIator

Antivirus evasion project

BBScan

A fast vulnerability scanner

CAS_EXP

CAS 硬编码 远程代码执行漏洞

CasExp

Apereo CAS exploit tool

CrossC2

generate CobaltStrike's cross-platform payload

cve-2020-1337-poc

poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

CVE2020-17087

Elevation Of Privileges Proof of Concept for Windows (win7-win10)

cve_2020_0796

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

EHole

EHole(棱洞)-红队重点攻击系统指纹探测工具

GetPwd

用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

MagiCude

分布式端口（漏洞）扫描、资产安全管理、实时威胁监控与通知、高效漏洞闭环、漏洞wiki、邮件报告通知、poc框架

Malleable-C2-Profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Sharp-SMBExec

SMBExec C# module

ShiroScanF

shiro反序列化批量ip快速检测脚本

SNETCracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

sRDI

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

virus

病毒&免杀脚本&乱七八糟的脚本

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

WindowsElvation

Windows Elevation

WinPwnage

UAC bypass, Elevate, Persistence methods

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.