hibensonman

edgetunnel

Running V2ray inside edge/serverless runtime

RingQ

一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader

Use-COM-objects-to-bypass-UAC

windows-api-function-cheatsheets

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

PECracker

针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificate segment infection are supported.

RealBlindingEDR

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

IPQuality

A script for IP quality detection

wifi-crack-tool

WiFi密码暴力破解工具-图形界面，支持多开并发、自动破解、自定义密码本、自动生成密码字典

TrollInstallerX

A TrollStore installer for iOS 14.0 - 16.6.1

IHxExec

Process injection alternative

CppDevShellcode

使用Visral Studio开发ShellCode

WeChatMsg

提取微信聊天记录，将其导出成HTML、Word、Excel文档永久保存，对聊天记录进行分析生成年度聊天报告，用聊天数据训练专属于个人的AI聊天助手

iptv

Collection of publicly available IPTV channels from all over the world

OpenArk

The Next Generation of Anti-Rookit(ARK) tool for Windows.

EverythingToolbar

Everything integration for the Windows taskbar.

ImmoralFiber

Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)

dataBrawl

一键生成免杀木马的 shellcode 免杀框架

notepad-plus-plus

Notepad++ official repository

Miles

二爷翻墙，专注免费翻墙30年，但没有掌握核心科技，一切已经开始！^_^

ladybird

Truly independent web browser

gsudo

Sudo for Windows

injection

AppleID

美区apple id注册教学，苹果账号注册美国

rsocks

Tiny little reverse socks5 client & server

reverse-tunnel-cpp

A Small program punch through NAT firewalls

socksme

Socks 5 proxy

speakeasy

Windows kernel and user mode emulation.

ShellcodeFluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

Richkware

Framework for building Windows malware, written in C++

ThreadStackSpoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.