mamor5409 Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

aceldr

Cobalt Strike UDRL for memory scanner evasion.

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

atexec-pro

Fileless atexec, no more need for port 445

avevasioncraftonline

AV Evasion Craft Online 在线免杀平台

awesome-poc

一个漏洞POC知识库

awesome-resume-for-chinese

:page_facing_up: 适合中文的简历模板收集（LaTeX，HTML/JS and so on）由 @hoochanlon 维护

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

bypassload

通过远程加载AES + XOR异或加密的shellcode免杀加载器，过主流杀软，无过多技术细节。

ccremote

这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，采用VS2017，默认分支hijack还在修改不能执行，master分支的项目可以正常的运行的，你可以切换到该分支查看可以执行的代码

cpppractice

crimsonedr

Simulate the behavior of AV/EDR for malware development training.

cs-autopostchain

基于 OPSEC 的 CobaltStrike 后渗透自动化链

cve

Gather and update all available and newest CVEs with their PoC.

darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing (Emotet method) + Api resolving from TIB + API hashing

dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

domaintools

内网域渗透小工具

fingerprint

各种工具指纹收集分享

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

geacon_plus

CobaltStrike beacon written in golang

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

jsphorse

结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具

koadic

zerosum0x0's Koadic

lsaparser

A shitty (and old) lsass parser.

mamor5409.github.io

mdpocs

猫蛋儿安全团队编写的poc能报就能打。企业微信、海康、Metabase、Openfire、泛微OA......

multidump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

mutationgate

Use hardware breakpoint to dynamically change SSN in run-time

nanodump

The swiss army knife of LSASS dumping

noterce

一种另辟蹊径的免杀执行系统命令的木马