scanfsec

scanf's starred repositories

SharpWxDump

微信客户端取证，可获取用户个人信息(昵称/账号/手机/邮箱/数据库密钥(用来解密聊天记录))；支持获取多用户信息，不定期更新新版本偏移，目前支持所有新版本、正式版本

Language:C#3866 36 62

mythril

Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Rootstock, Tron and other EVM-compatible blockchains.

Language:PythonMIT3708 80 841

suo5

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

Language:JavaMIT1802 16 32

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

Language:RustGPL-3.01722 23 37

GodPotato

Language:C#Apache-2.01587 11 11

gsocket

Connect like there is no firewall. Securely.

Language:CBSD-2-Clause1335 38 60

Shmily

这是一个 ( QQ Wechat 短信通话记录照片等) 记录导出归档的大项目.

GPL-3.01304 13 6

watchvuln

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

Language:GoMIT1106 15 45

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Language:CMIT872 12 9

Chaos-Rootkit

Now You See Me, Now You Don't

Language:C++681 19 13

shellnoob

A shellcode writing toolkit

Language:PythonMIT654 41 6

GoFileBinder

golang免杀捆绑器

Language:Go513 12 14

PPLBlade

Protected Process Dumper Tool

Language:Go470 8 6

azureOutlookC2

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

Language:CMIT448 80

SharpWeb

一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。

Language:C#431 3 1

MemFiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

Language:C376 11 1

microwaveo

将dll exe 等转成shellcode 最后输出exe 可定制加载器模板支持白文件的捆绑 shellcode 加密

Language:Go333 80

CVE-2022-40684

A proof of concept exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

Language:Python327 70

vagent

多功能 java agent 内存马

Language:Java268 3 6

CVE-2022-39952

POC for CVE-2022-39952

Language:Python267 80

CallstackSpoofingPOC

C++ self-Injecting dropper based on various EDR evasion techniques.

Language:CMIT267 3 1

HeapCrypt

Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap

Language:C++MIT230 70

ActiveMqRCE

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用内存马注入

Language:Java218 2 1

CVE-2021-21974

POC for CVE-2021-21974 VMWare ESXi RCE Exploit

Language:Python170 4 1

driver_callback_bypass_1909

研究和移除各种内核回调,在anti anti cheat的路上越走越远

Language:C++Apache-2.0165 110

CVE-2023-27532

Exploit for CVE-2023-27532 against Veeam Backup & Replication

Language:C#103 5 3

PTH_Exchange

If you only have hash, you can still operate exchange

Language:Python61 30

ExchangePE

Asset scanning by dictionary stitching Domain to identify Exchange Servers versions

Language:Go4200

Chrome-V8-RCE-CVE-2021-38003

CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224

Language:JavaScript31 40

NativePayload_ASM3

NativePayload_ASM/AsynASM , Injecting Meterpreter Payload bytes into local Process via Delegation Technique [Technique D] + in-memory with delay Changing RWX to X [Bypassing AVs]

Language:C#4 10