Pinned Repositories
-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server
This vulnerability allows an unauthenticated attacker to remotely execute arbitrary code on a vulnerable Confluence server. The vulnerability exists due to an improper validation of user-supplied input in the Confluence REST API. This allows an attacker to inject malicious code into the Confluence server, which can then be executed by the server
-shell
Msmap is a Memory WebShell Generator.
360tianqingRCE
捕获攻击队0day 360tianqingRCE
AMON-Eye
cve-2024-6387-pocx
Freeze-EDRBypass
Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Nimcrypt2
.NET, PE, & Raw Shellcode Packer/Loader Written in Nim
SMBploit
Offensive tool to scan & exploit vulnerabilities in Microsoft Windows over the Samba protocol (SMB) SMBv1/SMBv2 using the Metasploit Framework
thanatos
Mythic C2 agent targeting Linux and Windows hosts written in Rust
x2Ldr
nim免杀过某数字、某绒
r00t7oo2jm's Repositories
r00t7oo2jm/cve-2024-6387-pocx
r00t7oo2jm/ApexLdr
ApexLdr is a DLL Payload Loader written in C
r00t7oo2jm/CVE-2023-24871
pocs & exploit for CVE-2023-24871 (rce + lpe)
r00t7oo2jm/CVE-2024-26229
CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code
r00t7oo2jm/CVE-2024-28995
Exploit for CVE-2024-28995
r00t7oo2jm/CVE-2024-30078-
CVE-2024-30078 Detection and Command Execution Script
r00t7oo2jm/CVE-2024-30088
r00t7oo2jm/CVE-2024-31982
POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20
r00t7oo2jm/CVE-2024-37081
r00t7oo2jm/CVE-2024-37726-MSI-Center-Local-Privilege-Escalation
r00t7oo2jm/CVE-2024-38077
RDL的堆溢出导致的RCE
r00t7oo2jm/cve-2024-6387-poc
a signal handler race condition in OpenSSH's server (sshd)
r00t7oo2jm/cve-2024-6387-pocp
mirror of the original 7etsuo/cve-2024-6387-poc
r00t7oo2jm/CVE_2024_30078_POC_WIFI
basic concept for the latest windows wifi driver CVE
r00t7oo2jm/deoptimizer
Machine code de-optimizer.
r00t7oo2jm/EDRPrison
Leverage a legitimate driver to silence EDR
r00t7oo2jm/GoRedOps
🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.
r00t7oo2jm/JoJoLoader
助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan
r00t7oo2jm/ligolo-ng
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
r00t7oo2jm/MS-SharePoint-July-Patch-RCE-PoC
r00t7oo2jm/pdf-exploit
pdf exploit 集成
r00t7oo2jm/PECracker
针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and researchers. Currently, file header spoofing and certificate segment infection are supported.
r00t7oo2jm/PowerShell-Obfuscation-Bible
A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository are the result of personal research, including reading materials online and conducting trial-and-error attempts in labs and pentests.
r00t7oo2jm/pt-tools
r00t7oo2jm/RemoteKrbRelay
Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
r00t7oo2jm/ScopeSentry
ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点
r00t7oo2jm/SharpIncrease
A Tool that aims to evade av with binary padding
r00t7oo2jm/SmokeyObfuscator
Rewrite to fit my needs
r00t7oo2jm/Tempest
A command and control framework written in rust.
r00t7oo2jm/Voidgate
A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.