KuNgia09

byeintegrity8-uac

Bypass UAC at any level by abusing the Program Compatibility Assistant with RPC, WDI, and more Windows components

BypassUAC

Use ICMLuaUtil to Bypass UAC!

elk-detection-lab

An ELK environment containing interesting security datasets.

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

ThreatSeeker

ThreatSeeker: Threat Hunting via Windows Event Logs

WinDefenderKiller

Windows Defender Killer | C++ Code Disabling Permanently Windows Defender using Registry Keys

WMImplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

mutante

Kernel-mode Windows HWID spoofer

Black-Angel-Rootkit

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

python-mastery

Advanced Python Mastery (course by @dabeaz)

SysmonQuiet

RDLL for Cobalt Strike beacon to silence sysmon process

gpt4free-ts

Providing a free OpenAI GPT-4 API ! This is a replication project for the typescript version of xtekky/gpt4free

twiki

T Wiki 云安全知识文库，可能是国内首个云安全知识文库？

english-note

从0开始学习英语语法

sniffnet

Comfortably monitor your Internet traffic 🕵️‍♂️

sysmon-config

Sysmon configuration file template with default high-quality event tracing

openai-fill-billing

openai 充值指南

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

NFT-Attack-Vectors

This Repository contains list of Common NFT Attack Vectors. If you find any attack vectors missing, you can create a pull request and be a contributor of the project.

RiskySPN

Detect and abuse risky SPNs

kerberoast

wmiexec-Pro

New generation of wmiexec.py

Terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

mysql-fake-server

MySQL Fake Server (纯Java实现，支持GUI版和命令行版，提供Dockerfile，支持多种常见JDBC利用)

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

llvm-msvc-windows-driver-template

Windows kernel driver template for cmkr and llvm-msvc.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

TokenPlayer

Manipulating and Abusing Windows Access Tokens.