fengziHK's repositories
exploitnginx1.21.5
exploit nginx<=1.21.5
AttackWebFrameworkTools-5.0
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.
AniYa
免杀框架
BypassAntiVirus
远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。
ByPassBehinder
ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er
CSAgent
CobaltStrike 4.x通用白嫖及汉化加载器
CVE-2022-23222
CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
ExecRemoteAssembly
Execute Remote Assembly with args passing and with AMSI and ETW patching
FilelessRemotePE
Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
follina.py
Quick POC to replicate the 'Follina' Office RCE vulnerability for local testing purposes
Gllloader
Gllloader
go-shellcode-loader
GO免杀shellcode加载器混淆AES加密
gshell
A flexible and scalable cross-plaform shell generator tool
KaynStrike
UDRL for CS
Kernelhub
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
python-shellcode-loader
python免杀shellcode加载器 加密混淆
Remote_ShellcodeLoader
远程shellcode加载&权限维持+小功能
rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
RGPerson
RGPerson - 随机身份生成脚本
scan4all
Vulnerabilities Scan；15000+PoC漏洞扫描；20种应用密码爆破；7000+Web指纹；146种协议90000+规则Port扫描；Fuzz、HW打点、BugBounty神器...
ShellcodeLoader
该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用
shennina
Automating Host Exploitation with AI
SweetBabyScan
Red Tools 渗透测试
sysPPIDspoofing
give me sedebugprivilege I will become a SYSTEM by spoofing a parent process runned as AUTHORITY NT\system
wifipumpkin3
Powerful framework for rogue access point attack.
winlog
一款基于go的windows信息收集工具，主要收集目标机器rdp端口、mstsc远程连接记录、mstsc密码和安全事件中4624、4625登录事件记录
yulong-hids
一款由 YSRC 开源的主机入侵检测系统