redamancy404 Goto Github PK

allin

A flexible scanner

antivirus_r3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

arl-plus-docker

基于斗象灯塔修改后的版本。相比原版，增加了OneForAll、**数据库，修改了altDns

automatic-permission-maintenance

awesome-redteam

一个红队知识仓库

awesome-redteam-cheatsheet

Active Directory & Red-Team Cheat-Sheet in constant expansion.

backupoperatortoda

Backup Operators组成员权限到域控权限

binary-learning

二进制安全相关的学习笔记

blackbone

Windows memory hacking library

bof.net

A .NET Runtime for Cobalt Strike's Beacon Object Files

certstealer

A .NET tool for exporting and importing certificates without touching disk.

chunk-proxy

Chunk-Proxy：仅需一条http请求创建的Socks代理隧道

container-escape-check

docker container escape check || Docker 容器逃逸检测

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cs-courses-notes

✨终生持续更新✨ 计算机基础自学笔记/心得/实验/资源汇总；C语言为主，课程：数据结构、操作系统（MIT6.S081）等

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

darkloadlibrary

LoadLibrary for offensive operations

deathsleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

delegationbof

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

dll_inject_vs_binaries

LOLBINs that inject a DLL into a given process ID.

dnslogcmdecho

命令执行不回显但DNS协议出网的命令回显场景解决方案

domaintools

内网域渗透小工具

dumpy

Reuse opened handles to dynamically dump LSASS using Dinvoke_rs.

duplicatedump

Dumping LSASS with a duplicated handle from custom LSA plugin

eagle-rs

Windows Kernel Driver in Rust aka Rusty Rootkit for Red Teamers

edu-eams-webapp

OpenURP Educational Administrative Management System

ekko

Sleep Obfuscation

eventvieweruac_bof

Beacon Object File implementation of Event Viewer deserialization UAC bypass