Beast code in Giters

shincehor's starred repositories

ShadeLoader

ShadeLoader is a simple remote shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过

Language:C++2300

SharpWeb

一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。

Language:C#51700

Magic_C2

红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.

Language:C++13800

DojoLoader

Generic PE loader for fast prototyping evasion techniques

Apache-2.0100

RingQ

一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader

Language:C++80700

BenevolentLoader

Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

Language:CGPL-3.07500

RWX_MEMEORY_HUNT_AND_INJECTION_DV

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

Language:C++MIT21300

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

GPL-3.0182200

BadExclusionsNWBO

BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR

Language:C++6500

Process_Ghosting

Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by a file. This is an evasion technique.

Language:C++MIT1300

LetMeowIn

A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.

Language:C++34900

OneLong

简化前期信息收集的繁重任务，协助红队人员快速的信息收集，达到一条龙的效果

Language:Go18900

Shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor

Language:C++62400

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

Language:HTMLBSD-3-Clause48100

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

Language:CMIT219700