daffodi1 Goto Github PK

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

advobfuscator

Obfuscation library based on C++11/14 and metaprogramming

ai-webshell-detect

机器学习检测webshell

alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

allthethingsexec

Executes Blended Managed/Unmanged Exports

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

antimalware-research

Research on Anti-malware and other related security solutions

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

arcinject

Overwrite a process's recovery callback and invoke a crash to execute

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

avcleaner

C/C++ source obfuscator for antivirus bypass

beaconhunter

Detect and respond to Cobalt Strike beacons using ETW.

blacksun-framework

blacksun framework for QEMU/KVM game cheat development

bofs

Collection of Beacon Object Files

boombox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

building-c2-implants-in-cpp

The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogunlab).

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

casperstager

PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.

ccremote

这是一个基于gh0st远程控制的项目，使自己更深入了解远控的原理，采用VS2017，默认分支hijack还在修改不能执行，master分支的项目可以正常的运行的，你可以切换到该分支查看可以执行的代码

cobaltstrikesource

Cobaltstrike4.1 Source

com-research

Research into COM

com_inject

com_mapper

A tool to create COM class/interface relationships in neo4j

comon

A WinDbg extension to trace COM interactions

configpersist

Modifies machine.config for persistence after installing signed .net assembly onto GAC

cowinjecter

滥用cow机制进行全局注入

cpp-implant

A simple implant showcasing modern C++

createprocess

A small PoC that creates processes in Windows

csgo-dma-overlay

A basic CS:GO ESP utilising DMA and HDMI-Overlay

cve

Gather and update all available and newest CVEs with their PoC.