Pinned Repositories
awesome-yara
A curated list of awesome YARA rules, tools, and people.
DDG_MalWare_Clean_Tool
Watchdogs 、kthrotlds 挖矿蠕虫清理脚本。
K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest)
phonia
Phonia Toolkit is one of the most advanced toolkits to scan phone numbers using only free resources. The goal is to first gather standard information such as country, area, carrier and line type on any international phone numbers with a very good accuracy.
phpMussel
PHP-based anti-virus anti-trojan anti-malware solution.
SharpBeacon
CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
SuperDllHijack
SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了
uBlock
uBlock Origin - An efficient blocker for Chromium and Firefox. Fast and lean.
user-agent-list
常用浏览器的ua列表
x64dbg_plugin
x64dbg插件合集
A-new's Repositories
A-new/androidGRPC
A-new/Anti-AntiDebuggerDriver
VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
A-new/BlackLotus
BlackLotus UEFI Windows Bootkit
A-new/CHAOS
:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
A-new/Chaos-Rootkit
x64 ring0 rootkit with process hiding, privilege escalation, and capabilities for protecting and unprotecting processes
A-new/Cypher-Rat-Source-Code
Cypher Rat Full Version - Advanced Android Remote Tool 2022
A-new/fibratus
A modern tool for Windows kernel exploration and tracing with a focus on security
A-new/go-shellcode
A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.
A-new/HackerPermKeeper
A-new/llama2.c
Inference Llama 2 in one file of pure C
A-new/LoaderFly
助力每一位RT队员，快速生成免杀木马
A-new/Medusa
LD_PRELOAD Rootkit
A-new/ml-cpp
Machine learning C++ code
A-new/monomorph
MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash
A-new/Mshell
Memshell-攻防内存马研究
A-new/nps
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.
A-new/PingRAT
PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.
A-new/secguide
面向开发人员梳理的代码安全指南
A-new/seed-labs
SEED Labs developed in the last 20 years.
A-new/smarGate
内网穿透，c++实现，无需公网IP，小巧，易用，快速，安全，最好的多链路聚合（p2p+proxy）模式，不做之一...这才是你真正想要的内网穿透工具！
A-new/ssSocks5
魔改shadowsocks，实现socks5内网穿透。
A-new/Striker
A Command and Control (C2)
A-new/SubSeven
SubSeven Legacy Official Source Code Repository
A-new/syserdebugger
A-new/TangledWinExec
C# PoCs for investigation of Windows process execution techniques investigation
A-new/webshell-analyzer
Web shell scanner and analyzer.
A-new/whohk
whohk，linux下一款强大的应急响应工具 在linux下的应急响应往往需要通过繁琐的命令行来查看各个点的情况，有的时候还需要做一些格式处理，这对于linux下命令不是很熟悉的人比较不友好。本工具将linux下应急响应中常用的一些操作给集合了起来，并处理成了较为友好的格式，只需要通过一个参数就能代替繁琐复杂的命令来实现对各个点的检查。
A-new/WinArk
Windows Anti-Rootkit Tool
A-new/xll_test
A-new/zoro
zoro can help you expose local server to external network. Support both TCP/UDP, of course support HTTP. Zero-Configuration. zoro 帮助你将本地端口暴露在外网.支持TCP/UDP, 当然也支持HTTP. 内网穿透.