Justin Bui's repositories
WhiteChocolateMacademiaNut
Interact with Chromium-based browsers' debug port to view open tabs, installed extensions, and cookies
SwiftInMemoryLoading
Swift implementation of in-memory Mach-O loading on macOS
ObjCShellcodeLoader
macOS shellcode loader written in Objective-C
DylibHijackTest
Discover DYLD_INSERT_LIBRARIES hijacks on macOS
MacDirtyCowDemo
Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.
S-500-G2-Rat-Hvnc-Hidden-Broswers-Hidden-Apps-OperaGX-Rat-Remote-Malware
Clone Profile Hidden Desktop Hidden Browsers Hidden Chrome Hidden Chromodo Hidden SlimJet Hidden Sputnik Hidden Awast Browser Hidden UC Browser Hidden Atom Browser Hidden Opera Neon Hidden Firefox Hidden Edge Hidden Brave Hidden Palemoon Hidden Waterfox Hidden Opera Hidden 360 browser Hidden Comodo Dragon Hidden Internet Explorer Hidden Explorer Hidden Powershell Hidden CMD Hidden Outlook Hidden Thunderbird Hidden Foxmail Hidden Password Recovery HVNC/HVNC browsers HRDP/HRDP browsers/Wallets Reverse Proxy UAC Exploit for Windows 11/10 UAC Exploit for Windows 7 Remote Desktop Remote Cam Remote Microphone Remote Regedit Remote Console Silent Execute File Manager (download,zip,unzip) Disable Windows Defender Execute on connection Tasks Recovery All Chrome based Browsers Recovery for All Firefox based Browsers Recovery & Send Logs To Discord Startup/Schedule task Persistence Miner Watch Dog TaskMgr Dog Spam Tools Hrdp Browers Hrdp Chrome Hrdp Firefox Hrdp Opera Hrdp Brave Hrdp Wallets ArmoryQt Coinomi Atomic Exodus Electrum Jaxx S-500 G2 Builder ! Change Assembly Change Exe Icon Change Exe Name Change Filename File Path Group Clients Mutex Multi Ports Supported Anti Debug System Kill Taskmgr Blue Screen Error Watch Dog Uac Exploit on Execution TaskMgr Dog Export as Shell Code Crypter Merged Run PE Obfuscate
AceLdr
Cobalt Strike UDRL for memory scanner evasion.
apple-platform-rs
Rust crates supporting Apple platform development
ascii-image-converter
A cross-platform command-line tool to convert images into ascii art and print them on the console. Now supports braille art!
frostbyte
FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads
go-decrypt-jenkins
Simple tool to decrypt Jenkins encrypted strings
Godzilla
哥斯拉
Havoc
The Havoc Framework
HVNC
HVNC hidden remote VNC desktop with filemanager and backconnect
ImitateCobaltStrikeShellcode
Imitate CobaltStrike's Shellcode Generation
jenkins-test
blah blah blah
MicroBackdoor
Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]
Nidhogg
Nidhogg is an all-in-one simple to use rootkit for red teams.
nim_shellloader
nim,免杀,红队,shellcode,bypass,apt,bypass-av.
NlsCodeInjectionThroughRegistry
Dll injection through code page id modification in registry. Based on jonas lykk research
PostConfluence
哥斯拉Confluence后渗透插件 MakeToken SearchPage ListAllUser AddAdminUser ListAllPage ........
reverse_ssh
SSH based reverse shell
rusty-memory-loadlibrary
Load DLLs from memory with rust
Spotlight-Enum-Kit
JXA and swift code that can perform some macOS situational awareness without generating TCC prompts.
TCC-ClickJacking
A proof of concept for a clickjacking attack on macOS.
ulexecve
ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.