badboycxcc

IoT_Vulnerability_Wiki

IoT_Vulnerability_Wiki IoT漏洞知识库

script

各种脚本、漏洞利用工具

Exchange-Info

Exchange 信息收集工具

Exchange-UserBrute

Exchange 用户名爆破

Brute-Ratel-C4

Plugx

Plugx 开源情报集合

Beacon

重构Beacon

Rat-winos4.0-gh0st

免杀远控木马源码整理开源(银狐 winos 大灰狼 gh0st) Rat

AV_EDR_EPP_Notes

cobaltstrike-beacon-rust

CobaltStrike beacon in rust

EasyFish

参考Gophish框架，重构的轻量级钓鱼追踪工具

IoT-RCE-Scan

nacos-poc

Spearhead

A modified version of xd33 C2 malware framework created by the CIA

vshell

vshell 是一款安全对抗模拟、红队工具。提供隧道代理和隐蔽通道，模拟长期潜伏攻击者的策略和技术

XiebroC2

Supports multi-person collaborative penetration testing graphical framework, Lua plug-in extension, domain front-end/CDN online, custom multiple modules, custom sRDI, file management, process management, memory loading, screenshot, Socks5

badboycxcc.github.io

SharpBeacon

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

Awesome-POC

一个漏洞POC知识库

badboycxcc

Beacon_Source

not a reverse-engineered version of the Cobalt Strike Beacon

dnsvalidator_go

Heroinn

A cross platform C2/post-exploitation framework.

LinuxTQ

《Linux提权工具与方法论》

Maipu-MP1800X-SIL

敏感信息泄露漏洞 Sensitive Information Leak

OSWP-Note

OSWP-Notes

honestly the exam isn't that difficult; use README.md to navigate

Parasite

Compact MBR Bootkit for Windows

ShellBrute

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)