Ridter

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

100

linux-kernel-internals

linux kernel internals research details

1 10

PentestDB

各种数据库的利用姿势

1 10

protections-artifacts

Elastic Security detection content for Endpoint

Language:YARANOASSERTION1 10

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

Language:Python1 10

SysWhispers2

AV/EDR evasion via direct system calls.

Language:AssemblyApache-2.01 10

SysWhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Language:AssemblyApache-2.01 10

AceLdr

Cobalt Strike UDRL for memory scanner evasion.

Language:CMIT010

badPods

A collection of manifests that will create pods with elevated privileges.

Language:ShellMIT010

beacon

Former attempt at creating a independent Cobalt Strike Beacon

Language:Python010

CVE-2021-4034

CVE-2021-4034 1day

Language:C010

CVE-2021-4035

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

Language:C010

go-engine

golang engine

Language:GoMIT010

Heroinn

A cross platform C2/post-exploitation framework.

Language:RustGPL-3.0010

microwaveo

将dll exe 等转成shellcode 最后输出exe 可定制加载器模板支持白文件的捆绑 shellcode 加密

Language:Go010

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...

Language:Shell010

Rubeus

Trying to tame the three-headed dog.

Language:C#NOASSERTION030

SCMKit

Source Code Management Attack Toolkit

Apache-2.0000

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Language:C#NOASSERTION020

sneaky_gophish

Hiding GoPhish from the boys in blue

Language:Go010