bug-kid

bug-kid's Stars

• ImCoriander/Go-Packer-Loaders

  快速Go建你的免杀项目

  Language:Go204

• ImCoriander/ZeroEye

  自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹

  Language:C++25935

• T4y1oR/RingQ

  一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader

  Language:C++1.2k117

• berryalen02/PECracker

  针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificate segment infection are supported.

  Language:Go24226

• EvilBytecode/GoRedOps

  🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

  Language:Go44864

• HackerCalico/Magic_C2

  红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.

  Language:C++30760

• DosX-dev/UPX-Patcher

  Make "upx -d" unpacking impossible!

  Language:Visual Basic .NET1219

• g1oves2ali/anti-anti-virus

  免杀知识库 | 开源免杀木马效果测试 360 火绒 卡巴斯基 Microsoft Defender | 免杀工具汇总

  13911

• timwhitez/BinHol

  Binary Hollowing

  Language:Go587

• Laster-dev/Patch_All-in-one

  白文件patch

  Language:C++142

• yinsel/BypassAV

  一款基于PE Patch技术的后渗透免杀工具，支持32位和64位

  Language:C++23324

• wyzxxz/jndi_tool

  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具

  1.9k318

• EgeBalci/sgn

  Shikata ga nai (仕方がない) encoder ported into go with several improvements

  Language:Go1.6k217

• EvilBytecode/Evilbytecode-Shellcode-Go-Tactics

  A mutliple tactics to execute shellcode in go :}

  Language:Go131

• yj94/BinarySpy

  一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.

  Language:Python43158

• MastMind/PE-infector

  Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)

  Language:C5519

• mrknow001/API-Explorer

  API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

  Language:Python52637

• Y4er/ysoserial

  ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

  Language:Java647105

• R4gd0ll/I-Wanna-Get-All

  OA漏洞利用工具

  1.1k85

• wy876/POC

  收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1300多个poc/exp，长期更新。

  4.5k951

• 0x727/BypassPro

  对权限绕过自动化bypass的burpsuite插件

  Language:Java85546

• ins1gn1a/Frampton

  PE Binary Shellcode Injector - Automated code cave discovery, shellcode injection, ASLR bypass, x86/x64 compatible

  Language:Python7519

• likeNlong/dll_finder

  XXST-白加黑辅助挖掘工具，全程静默运行不影响正常使用

  Language:Python141

• CllmsyK/Thinkphp_Red-Tasselled-Spear

  Thinkphp图形化检测工具，仅供学习

  681

• lintstar/CS-AutoPostChain

  基于 OPSEC 的 CobaltStrike 后渗透自动化链

  41141

• Neo-Maoku/SearchAvailableExe

  寻找可利用的白文件

  Language:C++47263

• ZororoZ/fscanOutput

  一个用于处理fsacn输出结果的小脚本（尤其面对大量资产的fscan扫描结果做输出优化，让你打点快人一步！！！）

  Language:Python41737

• webraybtl/CodeQLpy

  CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。

  Language:CodeQL76384

• yutianqaq/AVEvasionCraftOnline

  An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.

  Language:Go32154

• shuanx/BurpFingerPrint

  BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件

  Language:Java58436