LYingSiMon

Yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

xbyak

a JIT assembler for x86(IA-32)/x64(AMD64, x86-64) MMX/SSE/SSE2/SSE3/SSSE3/SSE4/FPU/AVX/AVX2/AVX-512 by C++ header

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

AIAssistC

AIAssistC是一个AI游戏助手，使用OpenCv、DNN、Tensorflow、ssd_mobilenet/efficientdet、hidriver、MFC等技术，截取游戏屏幕进行对象识别，使用虚拟鼠标键盘驱动实现自动瞄准/自动开枪等功能，提升玩家的游戏体验。

dwm-screen-shot

将shellcode注入dwm.exe以进行屏幕截取

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

get_subscribe

✈️ 免费机场 / 免费VPN -> 自动获取免 clash/v2ray/trojan/sr/ssr 订阅链接，间隔12小时持续更新 | 科学上网 | 翻墙

ghidra

Ghidra is a software reverse engineering (SRE) framework

ida_bitfields

IDA Pro plugin to make bitfield accesses easier to grep

InviZzzible

InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.

KasperskyHook

Hook system calls on Windows by using Kaspersky's hypervisor

kernel_window_hide

内核级别隐藏指定窗口

libwsk

The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).

living-off-the-land

Fileless attack with persistence

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

MockingBird

🚀AI拟声: 5秒内克隆您的声音并生成任意语音内容 Clone a voice in 5 seconds to generate arbitrary speech in real-time

natpass

新一代主机管理工具，支持web vnc和web shell

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

NoScreen

Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection

OffensiveRust

Rust Weaponization for Red Team Engagements.

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

PowerRemoteDesktop

Remote Desktop entirely coded in PowerShell.

pyrebox

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

SCShell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

Shark

Turn off PatchGuard in real time for win7 (7600) ~ later

SharpShooter

Payload Generation Framework

SmsForwarder

短信转发器——监控Android手机短信、来电、APP通知，并根据指定规则转发到其他手机：钉钉机器人、企业微信群机器人、飞书机器人、企业微信应用消息、邮箱、bark、webhook、Telegram机器人、Server酱、PushPlus、手机短信等。PS.这个APK主要是学习与自用，如有BUG请提ISSUE，同时欢迎大家提PR指正

spdlog

Fast C++ logging library.

syscall-direct

zscan

Zscan a scan blasting tool set