GKDshell's repositories
ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
bottleneckOsmosis
瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf
bypassAV-1
免杀shellcode加载器
BypassAv-web
nim一键免杀
Crawlergo_x_Rad_x_XRAY
rad加crawlergo爬虫,查漏补缺
CVE-2020-0787-EXP-ALL-WINDOWS-VERSION
Support ALL Windows Version
Doge-XSS-Phishing
xss钓鱼,cna插件配合php后端收杆
EVA2
Another version of EVA using anti-debugging techs && using Syscalls
go-packer
golang打包二进制进行免杀
GPS-Telephone-short-message
获取手机GPS定位 通讯录 短信 电话
InScan
边界打点后的自动化渗透工具
JNDI-Injection-Exploit
JNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
JsLoader
js免杀shellcode,绕过杀毒添加自启
LangSrcCurise
SRC子域名资产监控
Malleable-C2-Profiles
Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.
Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
Redis-Getshell
Redis 未授权检测,密码爆破,Webshell写入,SSH公私钥写入,定时计划反弹Shell.
SecondaryDevCobaltStrike
二次开发过后的CobaltStrike,版本为4.1.在原来CobaltStrike的基础上修改多处特征,解决流量查杀问题.
shellcodeloader
shellcodeloader
ShiroAndFastJson
shiro加fastjson环境
SimpleXORshellcode
XOR shellcode,and use loader load it
Taie-AutoPhishing
剑指钓鱼基建快速部署自动化
TG_Session_Compress_Steal
steal Windows Telegram Desktop session
uuid_go_loder
bypass AV
YongYou
用友GRP-u8 注入POC