bbbking Goto Github PK

dbc2

DBC2 (DropboxC2) is a modular post-exploitation tool, composed of an agent running on the victim's machine, a controler, running on any machine, powershell modules, and Dropbox servers as a means of communication.

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

detections

digital-signature-hijack

Binaries, PowerShell scripts and information about Digital Signature Hijacking.

disablewin10patchguardpoc

pseudo-code to show how to disable patchguard with win10

divert

WinDivert: Windows Packet Divert

dnscat2

dnstunnel

dns隧道远控

driver-hijack

drvmap

driver mapper / capcom wrapper

dsefix

Windows x64 Driver Signature Enforcement Overrider

easy-hwid-spoofer

基于内核模式的硬件信息欺骗工具

edk2

EDK II

edrs

edrsandblast

efiguard

Disable PatchGuard and DSE at boot time

elf-infector

A simple program written in C for injecting shellcode into ELF binaries

empire

Empire is a PowerShell and Python post-exploitation agent.

eqgrp-free-file

Free sampling of files from the purported Equation Group hack.

funchook

Hook function calls by inserting jump instructions at runtime

furikuri

(In dev)furikuri is framework for code protection

fuzzilli

A JavaScript Engine Fuzzer

ghosttunnel

GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.

gofetch

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

gokturk-source

Simple Linux Rat

gym_fuzz1ng

OpenAI Gym environment for binary fuzzing based on afl

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

hidefiles

hideprocess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

hideprocesshookmdl

A simple rootkit to hide a process