mcpivoy's Stars
ynwarcs/CVE-2024-38063
poc for CVE-2024-38063 (RCE in tcpip.sys)
hyuunnn/Hyara
Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)
VirusTotal/yara
The pattern matching swiss knife
threatexpress/malleable-c2
Cobalt Strike Malleable C2 Design and Reference Guide
Bioruebe/UniExtract2
Universal Extractor 2 is a tool to extract files from any type of archive or installer.
HackerCalico/No_X_Memory_ShellCode_Loader
无可执行权限加载 ShellCode。Loading ShellCode without executable permission.
y11en/babysc
自用的shellcode生成框架
n1nj4sec/pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
killeven/DllToShellCode
Fast Conversion Windows Dynamic Link Library To ShellCode
TheWover/donut
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
hfiref0x/UACME
Defeating Windows User Account Control
mxmssh/drltrace
Drltrace is a library calls tracer for Windows and Linux applications.
mgeeky/cobalt-arsenal
My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+
darkr4y/geacon
Practice Go programming and implement CobaltStrike's Beacon in Go
boku7/BokuLoader
A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
bitsadmin/fakelogonscreen
Fake Windows logon screen to steal passwords
DeEpinGh0st/Erebus
CobaltStrike后渗透测试插件
Ascotbe/Medusa
:cat2:Medusa是一个红队武器库平台,目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能,持续开发中
0xsp-SRD/mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
tokyoneon/Chimera
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
swagkarna/Defeat-Defender-V1.2.0
Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC
AabyssZG/WebShell-Bypass-Guide
从零学习Webshell免杀手册
LandGrey/webshell-detect-bypass
绕过专业工具检测的Webshell研究文章和免杀的Webshell
arismelachroinos/lscript
The LAZY script will make your life easier, and of course faster.
Pizz33/JoJoLoader
助力红队成员一键生成免杀木马,使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
SwiftOnSecurity/sysmon-config
Sysmon configuration file template with default high-quality event tracing
leandrofroes/gftrace
A command line Windows API tracing tool for Golang binaries.
BlackArch/webshells
Various webshells. We accept pull requests for additions to this collection.
ergrelet/unlicense
Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.