pandatest2023 Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

babukransomware

Reversed source code of the Babuk Ransomware Version 1

decryption-tool

dogcs4.4

cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

fastsearch

FastSearch是一个快速文件搜索系统，它的原理是通过读取NTFS文件系统中的USN日志文件，快速地读取磁盘中的所有文件，并通过文件名称快速查找。

frpbuilder

To Make frp with no arguments and ini file ,which Conveniently in red teaming

frpmodify

修改frp支持域前置与配置文件自删除

injector

Some security tool, Can inject dll's into exe's and elevate a processe's handles

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

lockbit-black-builder

micro8

Gitbook

modlishka

Modlishka. Reverse Proxy.

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

pirategopher

Ransomware written in Go w/ a variety of payload options and a easy-to-deploy C2 server

python

python

pythontest

pythontest

ransomware

A POC Windows crypto-ransomware (Academic)

rdpscan

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

ruse

a secure and highly-portable reverse proxy (redirector) for your Red Team infrastructure.

ruse1

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

ssf

Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform

venom

Venom - A Multi-hop Proxy for Penetration Testers

wmiexec-regout

Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.