xixikotete

smbtakeover

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

samples

shared samples from #dailyphish and/or #apt tweets

pumpbin

🎃 PumpBin is an Implant Generation Platform.

CS-AutoPostChain

基于 OPSEC 的 CobaltStrike 后渗透自动化链

ShellcodeFluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

Advanced-Process-Injection-Workshop

AheadLib

Fake DLL Source Code Generator

QuJing

曲境是一个xposed模块，可支持在PC浏览器上动态监控（hook）安卓APP的函数调用和查看堆栈信息，及反射调用（invoke）等功能。

command

红队命令速查 是由棱角社区(Edge Forum) 整理的关于 Red Team 期间所常使用的一些基础命令。

FastJsonParty

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

zpscan

一个有点好用的信息收集工具。A somewhat useful information gathering tool.

gocheck

Because AV evasion should be easy.

Hook_WeChat_FaaS

frida Hook 微信云函数脚本

GoRedOps

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

RXPosed

go-cryptobin

go 常用加密解密库/go encrypt or decrypt pkg（RSA/SM2/EIGamal/Gost/AES/DES/TripleDes/SM4/Tea/Twofish）

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

Rust-for-Malware-Development

This repository contains my complete resources and coding practices for malware development using Rust 🦀.

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

TInjector

劫持Zygote在App启动前注入so

Z-Godzilla_ekp

哥斯拉webshell管理工具二次开发规避流量检测设备

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

In-Swor

永久免杀加载器移步另一个项目https://github.com/snnxyss/new_in_swor 一个简单内网渗透工具免杀 目前免杀fscan,mimikatz,frp,elevationstation,bypassuac, 一键killAV 。请使用In-Swor(x64版本)360报毒qvm20请更换exe图标资源。

WindowsBaselineAssistant

Windows安全基线核查加固助手

MemFiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

nanodump

The swiss army knife of LSASS dumping

WinArk

Windows Anti-Rootkit Tool

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

APT-Individual-Combat-Guide

《APT Individual Combat Guide》