lzz's starred repositories
DefenderCheck
Identifies the bytes that Microsoft Defender flags on.
pwn_jenkins
Notes about attacking Jenkins servers
superSearchPlus
superSearchPlus是聚合型信息收集插件,支持综合查询,资产测绘查询,信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。
EDRSilencer
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
Tokenvator
A tool to elevate privilege with Windows Tokens
I-Wanna-Get-All
OA漏洞利用工具
ShellcodeFluctuation
An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents
LearnJavaMemshellFromZero
【三万字原创】完全零基础从0到1掌握Java内存马,公众号:追梦信安
ChromeKatz
Dump cookies and credentials directly from Chrome/Edge process memory
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Vulhub-Reproduce
一个Vulhub漏洞复现知识库
autobloody
Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound
CVE-2022-30190-follina-Office-MSDT-Fixed
CVE-2022-30190-follina.py-修改版,可以自定义word模板,方便实战中钓鱼使用。
forest-trust-tools
Proof-of-concept tools for my AD Forest trust research
ScreenshotBOFPlus
Take a screenshot without injection for Cobalt Strike
Log4jHorizon
Exploiting CVE-2021-44228 in VMWare Horizon for remote code execution and more.
CVE-2023-22527-Godzilla-MEMSHELL
CVE-2023-22527 内存马注入工具
Invoke-Nanodump
HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
EntropyCalc_Go
File entropy calculator - Golang