Pinned Repositories
ARL
ARL官方仓库备份项目:ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
ARL2
ARL官方仓库备份项目+指纹添加工具:ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
CVE-2024-20931
CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839
CVE-2024-27198-RCE
CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4
deluder
Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock and Linux Sockets out of the box. ⚡
DNS-Tunnel-Keylogger
Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes.
InflativeLoading
Dynamically convert a native EXE to PIC shellcode by appending a shellcode stub
mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
no-defender
A slightly more fun way to disable windows defender. (through the WSC api)
Pcap_DNSProxy
Pcap_DNSProxy, a local DNS server based on packet capturing
abcheroworld's Repositories
abcheroworld/ARL
ARL官方仓库备份项目:ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
abcheroworld/ARL2
ARL官方仓库备份项目+指纹添加工具:ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
abcheroworld/CVE-2024-20931
CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839
abcheroworld/CVE-2024-27198-RCE
CVE-2024-27198 & CVE-2024-27199 Authentication Bypass --> RCE in JetBrains TeamCity Pre-2023.11.4
abcheroworld/deluder
Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock and Linux Sockets out of the box. ⚡
abcheroworld/DNS-Tunnel-Keylogger
Keylogging server and client that uses DNS tunneling/exfiltration to transmit keystrokes.
abcheroworld/InflativeLoading
Dynamically convert a native EXE to PIC shellcode by appending a shellcode stub
abcheroworld/mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
abcheroworld/no-defender
A slightly more fun way to disable windows defender. (through the WSC api)
abcheroworld/Pcap_DNSProxy
Pcap_DNSProxy, a local DNS server based on packet capturing
abcheroworld/PocOrExp_in_Github
聚合Github上已有的Poc或者Exp,CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.
abcheroworld/Pyramid
a tool to help operate in EDRs' blind spots
abcheroworld/reveng_rtkit
Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
abcheroworld/Shelter
ROP-based sleep obfuscation to evade memory scanners
abcheroworld/XiebroC2
Go编写的多人运动渗透测试图形化框架、支持lua插件扩展、自定义多个模块、自定义shellcode、文件管理、进程管理、内存加载、反向代理等功能