Pinned Repositories
2021hvv_vul
2021hvv漏洞汇总
403Bypasser
AceLdr
Cobalt Strike UDRL for memory scanner evasion.
Apache-Dubbo-CVE-2023-23638-exp
Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
cut_file
qq-tim-elevation
CVE-2023-34312
socks5proxy
这是一个代理池本地客户端,实现了socks的监听和转发,勉强能用
tmp_file
解决先知文件大小限制的问题
whitefrp
这是一个带白签名的frp,可用于规避所有杀软和流量检测
yaraplus
修改自官方yara工具
kaliworld's Repositories
kaliworld/tmp_file
解决先知文件大小限制的问题
kaliworld/yaraplus
修改自官方yara工具
kaliworld/whitefrp
这是一个带白签名的frp,可用于规避所有杀软和流量检测
kaliworld/cut_file
kaliworld/socks5proxy
这是一个代理池本地客户端,实现了socks的监听和转发,勉强能用
kaliworld/AceLdr
Cobalt Strike UDRL for memory scanner evasion.
kaliworld/ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
kaliworld/aws-enumerator
The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testing. The tool is intended to speed up the process of Cloud review in case the security researcher compromised AWS Account Credentials.
kaliworld/Beacon_Source
not a reverse-engineered version of the Cobalt Strike Beacon
kaliworld/BinarySpy
A tool for manual or automatic patch shellcode into binary file Oder to bypass AV.
kaliworld/Cobalt-Strike
Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
kaliworld/CVE-2024-38077
RDL的堆溢出导致的RCE
kaliworld/d-eyes
D-Eyes为M-SEC社区一款检测与响应工具
kaliworld/ExportReport
本项目用于自动化生成报告。可根据项目需求,通过简单的提取变量来自定义报告模板。内附常见扫描器API/原报告(awvs、xray、goby)数据提取模块,可直接生成全新的自定义报告。 对有复杂的功能需求时,适用于有Python基础的人使用。 本项目内附二次开发所用的资料文档,欢迎各位提Pull Request
kaliworld/FakeToa
Fake IP sources using Linux's BPF feature
kaliworld/GoAWSConsoleSpray
Tool to spray AWS Console IAM Logins
kaliworld/hookchain
HookChain: A new perspective for Bypassing EDR Solutions
kaliworld/iam-vulnerable
Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
kaliworld/Malleable-CS-Profiles
A list of python tools to help create an OPSEC-safe Cobalt Strike profile.
kaliworld/news
kaliworld/Nidhogg
Nidhogg is an all-in-one simple to use rootkit for red teams.
kaliworld/perfect-loader
Load a dynamic library from memory by modifying the native Windows loader
kaliworld/RealBlindingEDR
Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...
kaliworld/Sec-Interview-4-2023
一个2023届毕业生在毕业前持续更新、收集的安全岗面试题及面试经验分享~
kaliworld/Self-Defective-Program
无Windows API的新型恶意程序:自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究
kaliworld/sgn
Shikata ga nai (仕方がない) encoder ported into go with several improvements
kaliworld/SKRoot-linuxKernelRoot
新一代SKRoot,挑战全网root检测手段,跟面具完全不同思路,摆脱面具被检测的弱点,完美隐藏root功能,全程不需要暂停SELinux,实现真正的SELinux 0%触碰,通用性强,通杀所有内核,不需要内核源码,直接patch内核,兼容安卓APP直接JNI调用,稳定、流畅、不闪退。
kaliworld/ThreadlessInject-BOF
BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.
kaliworld/trojan
An unidentifiable mechanism that helps you bypass GFW.
kaliworld/vmprotect-3.5.1