reloc2's repositories
adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
APT_REPORT
Interesting APT Report Collection And Some Special IOC
AtlasLdr
Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
exploit-db
exploit-db
flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
malware-analysis
malware-analysis
malware-development
malware-development
CAudit
集权设施扫描器
cf
云环境利用框架(Cloud exploitation framework)主要用来方便红队人员在获得 AK 的后续工作。
ChromeKatz-dev
Dump cookies directly from Chrome process memory
cobalt-strike-beacon-dev
not a reverse-engineered version of the Cobalt Strike Beacon
go-exploit-dev
A Go-based Exploit Framework
JARVIS
JARVIS, a system to connect LLMs with ML community
osmedeus
A Workflow Engine for Offensive Security
PoolParty
A set of fully-undetectable process injection techniques abusing Windows Thread Pools
PPLmedic
Dump the memory of any PPL with a Userland exploit chain
Rat-winos4.0-gh0st
免杀远控木马源码整理开源(银狐 winos 大灰狼 gh0st) Rat
rust-shellcode
:japanese_ogre: windows-rs shellcode loader :japanese_ogre:
shadow-rs
Windows Kernel Rootkit in Rust
syzkaller
syzkaller is an unsupervised coverage-guided kernel fuzzer
tiny_tracer
A Pin Tool for tracing API calls etc
udmp-parser
A Windows user minidump C++ parser library.
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
x64dbg-xfg-marker
An x64dbg plugin which marks XFG call signatures as data