Pinned Repositories
active-directory-pentest
Advanced-Process-Injection-Workshop
BOF-BypassUAC
一个BypassUAC的BOF用来bypass Windows Defender。(请给我加个星，谢谢。)
CobaltStrike-Toolset
Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on
dashboards-reporting
ebpf
Elastic's eBPF
GMSAPasswordReader
Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
logstash-input-jdbc
Logstash Plugin for JDBC Inputs
opensearch-build-libraries
theomilan3's Repositories
theomilan3/BOF-BypassUAC
一个BypassUAC的BOF用来bypass Windows Defender。(请给我加个星，谢谢。)
theomilan3/awesome-edr-bypass
Awesome EDR Bypass Resources For Ethical Hacking
theomilan3/DefenseEvasionTechniques
Defense Evasion Techniques Repository. This repository contains a collection of techniques designed to bypass Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) systems.
theomilan3/EDR-XDR-AV-Killer
Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver
theomilan3/Exp-Tools
一款集成高危漏洞exp的实用性工具
theomilan3/FineReportExploit
帆软报表漏洞检测工具
theomilan3/FrameVul
POC集合，框架nday漏洞利用
theomilan3/go-bypass-loader
go实现的shellcode免杀加载器，实测时可过火绒，360。当前效果请自行评判。
theomilan3/Hunting-Queries-Detection-Rules000
KQL Queries. Microsoft Defender, Microsoft Sentinel
theomilan3/JavaCode
分享日常漏洞分析，用友，致远OA，帆软
theomilan3/Killer258
Killer tool is designed to bypass AV/EDR security tools using various evasive techniques.
theomilan3/LatrodectusYT
This is the repo linked to the malware analysis of Latrodectus on YT.
theomilan3/ldap_shell
AD ACL abuse
theomilan3/nacos_derby_rce
Nacos Derby命令执行漏洞利用脚本
theomilan3/OneScan
OneScan是递归目录扫描的BurpSuite插件
theomilan3/opensearch-metrics
OpenSearch Metrics
theomilan3/OSSEM-DD
OSSEM Data Dictionaries
theomilan3/passive-scan-client-plus
burpsuite passive-scan-client 插件持续维护分支 v2024
theomilan3/PassTheCert
Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel
theomilan3/PentesterTools
渗透测试工具集
theomilan3/PostHikvision
哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。
theomilan3/powerview.py
Just another Powerview alternative
theomilan3/pywerview
A (partial) Python rewriting of PowerSploit's PowerView
theomilan3/ShellGen
PowerShell script to generate ShellCode in various formats
theomilan3/sleepmask-vs
A simple Sleepmask BOF example
theomilan3/TongdaOATool
通达OA漏洞检测工具
theomilan3/TrollAMSI
theomilan3/TsojanScan
An integrated BurpSuite vulnerability detection plug-in.
theomilan3/XG_NTAI
用于Webshell木马免杀、流量加密传输，多多支持star
theomilan3/yuze
A socksv5 proxy tool Written by CLang. 一款纯C实现的基于socks5协议的轻量内网穿透工具，支持ew的全部数据转发方式，支持跨平台使用