Pinned Repositories
Automatic-permission-maintenance
CobaltStrike 上线自动权限维持插件
CobaltStrike_Script_Wechat_Push
CobatStrike-Script, Beacon上线,微信实时推送!
CobaltStrikeReflectiveLoader
Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
CrossC2
generate CobaltStrike's cross-platform payload
CrossC2-C2Profile
CrossC2通信协议API实现
CS-Avoid-killing
CS免杀加载器
CS-Loader
CS免杀
Decrypt_Weblogic_Password
搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。
Doge-XSS-Phishing
xss钓鱼，cna插件配合php后端收杆
fuzz2022
CF免杀一句话网站管理工具
ceshi897's Repositories
ceshi897/Automatic-permission-maintenance
CobaltStrike 上线自动权限维持插件
ceshi897/CobaltStrikeReflectiveLoader
Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.
ceshi897/CrossC2
generate CobaltStrike's cross-platform payload
ceshi897/CrossC2-C2Profile
CrossC2通信协议API实现
ceshi897/CS-Avoid-killing
CS免杀加载器
ceshi897/CS-Loader
CS免杀
ceshi897/Doge-XSS-Phishing
xss钓鱼，cna插件配合php后端收杆
ceshi897/fuzz2022
CF免杀一句话网站管理工具
ceshi897/Cobaltstrike_4.3_Source
Cobaltstrike4.3源码
ceshi897/CobaltstrikeSource
Cobaltstrike4.1 Source
ceshi897/fuzzdb
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
ceshi897/fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
ceshi897/geacon_pro
跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cross-platform CobaltStrike Beacon bypass anti-virus, supports 4.1+ version.
ceshi897/google-10000-english
This repo contains a list of the 10,000 most common English words in order of frequency, as determined by n-gram frequency analysis of the Google's Trillion Word Corpus.
ceshi897/helloword
ceshi897/injectAmsiBypass
Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
ceshi897/jsql-injection
jSQL Injection is a Java application for automatic SQL database injection.
ceshi897/npsmodify
这是nps的魔改，进行了流量特征的魔改，并且进行了漏洞的修复
ceshi897/PLtools
整理一些内网常用渗透小工具
ceshi897/powershell-bypass
powershell命令免杀的小工具，可过Defender、360等，可执行上线cobaltstrike、添加计划任务等。 A powershell loader bypass anti-virus
ceshi897/powershell-obfuscation
powershell免杀混淆器，简单有效，VT全过。A simple and effective powershell obfuscaiton tool bypass Anti-Virus
ceshi897/S-inject
支持x86/x64的DLL和Shellcode 的Windows注入的免杀工具
ceshi897/SharpSQLTools
SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
ceshi897/ShellcodeLoader
Windows通用免杀shellcode生成器，能够绕过Microsoft Defender、360、火绒、Panda等杀软的查杀。
ceshi897/SuperSQLInjectionV1
超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。
ceshi897/Tomcat2CS
Tomcat Jar包后门
ceshi897/usefull-code
usefull-code
ceshi897/Voidgate
A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.
ceshi897/x1DecoderPlus
AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
ceshi897/Z-Godzilla_ekp
哥斯拉webshell管理工具二次开发规避流量检测设备