yandek16

yandek16's Stars

• trustedsec/unicorn

  Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

  Language:Python3.7k812

• cobbr/Covenant

  Covenant is a collaborative .NET C2 framework for red teamers.

  Language:C#4.1k767

• Whitecat18/Powershell-Scripts-for-Hackers-and-Pentesters

  An List of my own Powershell scripts, commands and Blogs for windows Red Teaming.

  Language:PowerShell34635

• EmpireProject/Empire-GUI

  Empire client application

  Language:JavaScript489147

• EmpireProject/PSInject

  Inject PowerShell into any process

  Language:PowerShell21882

• cobbr/ObfuscatedEmpire

  ObfuscatedEmpire is a fork of Empire with Invoke-Obfuscation integrated directly into it's functionality.

  Language:PowerShell22832

• lleon1435/Mshikaki

  A shellcode injection tool capable of bypassing AMSI. Features the QueueUserAPC() injection technique and supports XOR encryption

  63

• MobSF/Mobile-Security-Framework-MobSF

  Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  Language:JavaScript17.1k3.2k

• chvancooten/OSEP-Code-Snippets

  A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

  Language:C#1.1k408

• aahmad097/AlternativeShellcodeExec

  Alternative Shellcode Execution Via Callbacks

  Language:C++1.4k298

• EgeBalci/sgn

  Shikata ga nai (仕方がない) encoder ported into go with several improvements

  Language:Go1.4k205

• blogresponder/Realtek-rtkio64-Windows-driver-privilege-escalation

  A PoC of a privilege escalation vulnerability in the Realtek rtkio64 Windows driver.

  Language:C132

• adonespitogo/AdoBot

  Open-source android spyware

  Language:Java779309

• nyx0/Dendroid

  Android Trojan

  Language:Java180132

• n1nj4sec/pupy

  Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

  Language:Python8.4k1.8k

• btbd/umap

  UEFI bootkit for driver manual mapping

  Language:C51198

• sbilly/awesome-security

  A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

  12.3k1.9k

• xvzc/SpoofDPI

  A simple and fast anti-censorship tool written in Go

  Language:Go3.4k248

• klezVirus/SilentMoonwalk

  PoC Implementation of a fully dynamic call stack spoofer

  Language:C++67893

• hacksider/Deep-Live-Cam

  real time face swap and one-click video deepfake with only a single image

  Language:Python36.6k5.2k

• BushidoUK/Ransomware-Tool-Matrix

  A resource containing all the tools each ransomware gangs uses

  58957

• google/ExoPlayer

  This project is deprecated and stale. The latest ExoPlayer code is available in https://github.com/androidx/media

  Language:Java21.7k6k

• malwaredllc/byob

  An open-source post-exploitation framework for students, researchers and developers.

  Language:Python8.9k2.1k

• MichaelGrafnetter/DSInternals

  Directory Services Internals (DSInternals) PowerShell Module and Framework

  Language:C#1.6k252

• keywa7/keywa7

  The tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.

  Language:Go537

• gr3yc4t/dns-poisoning-tool

  A tool to perform DNS cache poisoning against vulnerable server

  Language:Python2911

• hacking-support/DVUEFI

  Damn Vulnerable UEFI

  Language:C++24219

• Octoberfest7/TeamsPhisher

  Send phishing messages and attachments to Microsoft Teams users

  Language:Python1k129

• PhrozenIO/Arcane

  Arcane - A secure remote desktop application for Windows with the particularity of having a server entirely written in PowerShell and a cross-platform client (Python/QT6).

  Language:Python15811

• klezVirus/DriverJack

  Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

  Language:C++27540