mcpivoy

mcpivoy's Stars

• ynwarcs/CVE-2024-38063

  poc for CVE-2024-38063 (RCE in tcpip.sys)

  Language:Python48092

• hyuunnn/Hyara

  Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)

  Language:Python22243

• VirusTotal/yara

  The pattern matching swiss knife

  Language:C8.1k1.4k

• threatexpress/malleable-c2

  Cobalt Strike Malleable C2 Design and Reference Guide

  1.6k292

• Bioruebe/UniExtract2

  Universal Extractor 2 is a tool to extract files from any type of archive or installer.

  Language:AutoIt3.5k332

• HackerCalico/No_X_Memory_ShellCode_Loader

  无可执行权限加载 ShellCode。Loading ShellCode without executable permission.

  Language:C++31655

• y11en/babysc

  自用的shellcode生成框架

  Language:C2910

• n1nj4sec/pupy

  Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

  Language:Python8.3k1.8k

• moonD4rk/HackBrowserData

  Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

  Language:Go10.6k1.5k

• killeven/DllToShellCode

  Fast Conversion Windows Dynamic Link Library To ShellCode

  Language:C375127

• TheWover/donut

  Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

  Language:C3.5k621

• hfiref0x/UACME

  Defeating Windows User Account Control

  Language:C6.2k1.3k

• mxmssh/drltrace

  Drltrace is a library calls tracer for Windows and Linux applications.

  Language:HTML38665

• mgeeky/cobalt-arsenal

  My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

  Language:PowerShell1k149

• darkr4y/geacon

  Practice Go programming and implement CobaltStrike's Beacon in Go

  Language:Go1.1k206

• boku7/BokuLoader

  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

  Language:C1.2k243

• bitsadmin/fakelogonscreen

  Fake Windows logon screen to steal passwords

  Language:C#1.3k230

• DeEpinGh0st/Erebus

  CobaltStrike后渗透测试插件

  Language:PowerShell1.5k214

• Ascotbe/Medusa

  :cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

  Language:Python2.1k338

• 0xsp-SRD/mortar

  evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

  Language:Pascal1.4k222

• tokyoneon/Chimera

  Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

  Language:PowerShell1.4k232

• swagkarna/Defeat-Defender-V1.2.0

  Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

  Language:Batchfile1.4k303

• AabyssZG/WebShell-Bypass-Guide

  从零学习Webshell免杀手册

  1.6k120

• LandGrey/webshell-detect-bypass

  绕过专业工具检测的Webshell研究文章和免杀的Webshell

  Language:Classic ASP1.7k407

• arismelachroinos/lscript

  The LAZY script will make your life easier, and of course faster.

  Language:Shell4k1.1k

• Pizz33/JoJoLoader

  助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan

  Language:Rust34951

• SwiftOnSecurity/sysmon-config

  Sysmon configuration file template with default high-quality event tracing

  4.7k1.7k

• leandrofroes/gftrace

  A command line Windows API tracing tool for Golang binaries.

  Language:C14611

• BlackArch/webshells

  Various webshells. We accept pull requests for additions to this collection.

  Language:PHP874331

• ergrelet/unlicense

  Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

  Language:Python993185