makheo Goto Github PK

ladon

Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 11.4内置245个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

lecmd

Lnk Explorer Command line edition!!

lilith

Lilith, C++ Cybersecurity Research Project

limelighter

A tool for generating fake code signing certificates or signing real ones

lnk2pwn

Malicious Shortcut(.lnk) Generator

lnk_generator

Small project to facilitate creation of .lnk payloads

lotl

Living Off The Land (LOTL) persistent Reverse shell

meshagent

MeshAgent used along with MeshCentral to remotely manage computers. Many variations of the background management agent are included as binaries in the MeshCentral project.

moreimpacketexamples

More examples using the Impacket library designed for learning purposes.

mydumbedr

newbie-guideline

컴퓨터과학/공학 신입생 및 비전공자 신입을 위한 지침서

onedriveupdatersideloading

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post

osce3-complete-guide

OSWE, OSEP, OSED, OSEE

osi-and-tcp

pe_to_shellcode

Converts PE into a shellcode

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

printspoofer

Abusing impersonation privileges through the "Printer Bug"

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

quasar

Remote Administration Tool for Windows

rpcview

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

rwx_memeory_hunt_and_injection_dv

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

securitylab

Resources related to GitHub Security Lab

securitytips

semgrep-rules

A collection of my Semgrep rules to facilitate vulnerability research.

sharpdllproxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

simplentsyscallfuzzer

sliver

Adversary Emulation Framework

sspiuacbypass

Bypassing UAC with SSPI Datagram Contexts