QAQM8oO

QAQM8oO's Stars

• EdgeSecurityTeam/EHole

  EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

  Language:Go3.1k402

• EASY233/Finger

  一款红队在大量的资产中存活探测与重点攻击系统指纹探测工具

  Language:Python1.6k161

• infosec-au/altdns

  Generates permutations, alterations and mutations of subdomains and then resolves them

  Language:Python2.3k447

• shmilylty/OneForAll

  OneForAll是一款功能强大的子域收集工具

  Language:Python8.5k1.3k

• CodeXTF2/ScreenshotBOF

  An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.

  Language:C34651

• RowTeam/SharpDecryptPwd

  SharpDecryptPwd source, To Decrypt Navicat,Xmanager,Filezilla,Foxmail,WinSCP,etc

  Language:C#736110

• Fody/Fody

  Extensible tool for weaving .net assemblies

  Language:C#4.4k463

• icsharpcode/SharpZipLib

  #ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.

  Language:C#3.7k976

• janoglezcampos/llvm-yx-callobfuscator

  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

  Language:C26530

• redteamsocietegenerale/DLLirant

  DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

  Language:C#48041

• joxeankoret/diaphora

  Diaphora, the most advanced Free and Open Source program diffing tool.

  Language:Python3.7k375

• TheCruZ/kdmapper

  KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

  Language:C++2k505

• fjqisba/E-Decompiler

  用来辅助分析易语言程序的IDA插件

  Language:C++45678

• DreamSoule/ollvm17

  Obfuscation LLVM 17

  Language:C++34857

• icyguider/Shhhloader

  Syscall Shellcode Loader (Work in Progress)

  Language:Python1.1k184

• yaklang/yakit

  Cyber Security ALL-IN-ONE Platform

  Language:TypeScript6.8k836

• demongodYY/cpp_WmiListenUsb

  Usb devices monitor

  Language:C++31

• Jinjinov/Usb.Events

  Subscribe to the Inserted and Removed events to be notified when a USB drive is plugged in or unplugged, or when a USB device is connected or disconnected. Usb.Events is a .NET Standard 2.0 library and uses WMI on Windows, libudev on Linux and IOKit on macOS.

  Language:C#9924

• thereisnotime/xxUSBSentinel

  Windows anti-forensics USB monitoring tool.

  Language:C#6515

• fwxs/usb_monitor

  Monitor USB devices connections and disconnections.

  Language:C++31

• Eric-Canas/USBMonitor

  USBMonitor is an easy-to-use cross-platform library for USB device monitoring that simplifies tracking of connections, disconnections, and examination of connected device attributes on both Windows and Linux, freeing the user from platform-specific details or incompatibilities.

  Language:Python357

• pybind/pybind11

  Seamless operability between C++11 and Python

  Language:C++15.9k2.1k

• 0xsp-SRD/mortar

  evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

  Language:Pascal1.4k226

• RythmStick/AMSITrigger

  The Hunt for Malicious Strings

  Language:C#1.1k155

• YOLOP0wn/POSTDump

  Language:C#31437

• frkngksl/Shoggoth

  Shoggoth: Asmjit Based Polymorphic Encryptor

  Language:C++68687

• w1u0u1/minidump

  Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemory.

  Language:C11622

• nettitude/ShellcodeMutator

  Language:Python23632

• d35ha/CallObfuscator

  Obfuscate specific windows apis with different apis

  Language:C++984176

• WithSecureLabs/C3

  Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

  Language:C++1.5k271