mukarramkhalid Goto Github PK

adpt

DLL proxying for lazy people

androidfridabeginnersbook

《安卓Frida逆向与抓包实战》随书附件

antifrida_bypass

Generic Script To Bypass Some AntiFrida Checks

cswhispers

Source generator to add D/Invoke and indirect syscall methods to a C# project.

cyber-apocalypse-2024

Official writeups for Cyber Apocalypse CTF 2024: Hacker Royale

darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

dirtycow

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

edr-preloader

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

evil-jsdelivr

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

frida-android-unpinning

A Frida script to disable SSL certificate pinning in a target application

frida-labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

frida-snippets

Hand-crafted Frida examples

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

google-scraper

[Python] Google Scraper & Mass Exploiter

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

hover

CLI for deploying web applications to AWS Lambda

joomla-sqli-mass-exploit

Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit

laravel-sendgrid-driver

This library can add sendgrid driver into the laravel's mail configure.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

lotl

Living Off The Land (LOTL) persistent Reverse shell

mukarramkhalid

multidump

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

needle

A multiprocessing blind SQL injection script to handle cases where sqlmap fails.

ntlm_relay_gat

okhttplogger-frida

Frida 实现拦截okhttp的脚本

osed

Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

pezor

Open-Source Shellcode & PE Packer

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups