KuNgia09

AutoX

A UiAutomator on android, does not need root access(安卓平台上的JavaScript自动化工具)

GpsSetter

Xposed module which will set location where you want without effect mock location.

DccwBypassUAC

Windows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".

SspiUacBypass

Bypassing UAC with SSPI Datagram Contexts

Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities) and share them among connected sibling servers (Villain instances running on different machines).

Twitter-Block-Porn

共享黑名单, 一键拉黑所有黄推诈骗犯. Block scammers who sending fake porn comments, and help you improve your experience using Twitter.

nanodump

The swiss army knife of LSASS dumping

process-cloning

The Definitive Guide To Process Cloning on Windows

Dirty-Vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

CallBackDump

dump lsass进程工具

RestrictedAdmin

Remotely enables Restricted Admin Mode

pywintrace

ETW Python Library

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

SharPersist

dbeaver

Free universal database tool and SQL client

VMUnprotect

VMUnprotect can dynamically log and manipulate calls from virtualized methods by VMProtect.

AMSI-Unchained

Unchain AMSI by patching the provider’s unmonitored memory space

whoamsi

An effort to track security vendors' use of Microsoft's Antimalware Scan Interface

ListRDPConnections

C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机

Amsi_Bypass_In_2023

Amsi Bypass payload that works on Windwos 11

EDRSandblast

GadgetToJScript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

SharpWMI

SharpWMI is a C# implementation of various WMI functionality.

adduserbysamr-bof

Cobalt Strike BOF that Add a user to localgroup by samr

WMI-Persistence

PowerShell-Suite

My musings with PowerShell

p0wnedShell

PowerShell Runspace Post Exploitation Toolkit

Kraken

Kraken, a modular multi-language webshell coded by @secu_x11

DeepL-Crack

Bypass 5,000 characters, Remove edit restriction, Use DeepL Pro Account Cookies/DeepL Api Free Token to translate, Unlock Formal/informal tone, Randomize fingerprint

Amsi-Bypass-Powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.