Beast code in Giters

shincehor's starred repositories

Dictofuscation

Obfuscate the bytes of your payload with an association dictionary

GPL-3.0100

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the original GodPotato source code by BeichenDream.

Language:C#Apache-2.028500

ShadeLoader

ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过

Language:C++3600

SharpWeb

一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。

Language:C#54200

Magic_C2

红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.

Language:C++20800

DojoLoader

Generic PE loader for fast prototyping evasion techniques

Apache-2.0100

RingQ

一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader

Language:C++102100

LoaderFly

助力每一位RT队员，快速生成免杀木马

Language:C70000

BenevolentLoader

Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

Language:CGPL-3.07600

RWX_MEMEORY_HUNT_AND_INJECTION_DV

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

Language:C++MIT22400

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

GPL-3.0185000

BadExclusionsNWBO

BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR

Language:C++6800

TrollDump

Language:Batchfile7900

Process_Ghosting

Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by a file. This is an evasion technique.

Language:C++MIT1400

RunAsPy

Language:PythonAGPL-3.0800

LetMeowIn

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

Language:C++36000

OneLong

简化前期信息收集的繁重任务，协助红队人员快速的信息收集，达到一条龙的效果

Language:Go21000

Shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor

Language:C++65000

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

Language:HTMLBSD-3-Clause51000

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

Language:CMIT223500