jisanlong Goto Github PK

affinis

catspin

Catspin rotates the IP address of HTTP requests making IP based blocks or slowdown measures ineffective. It is based on AWS API Gateway and deployed via AWS Cloudformation.

chisel-strike

A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

ebpfexploit

Exploit tool implemented using ebpf.

elfloader

An architecture-agnostic ELF file flattener for shellcode

elfloader-1

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

loki-bot

多功能Windows机器运维管理工具

monomorph

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

mscan

一款域渗透扫描工具，方便一键自动化、全方位的信息收集及扫描域提权漏洞。

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

nccfsas

Information released publicly by NCC Group's Full Spectrum Attack Simulation (FSAS) team.

pamspy

Credentials Dumper for Linux using eBPF

pandasniper

Linux C2 框架demo，为期2周的”黑客编程马拉松“，从学习编程语言开始到实现一个demo的产物

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

rediswritefile

通过 Redis 主从写出无损文件

sharpuserip

在域控或远程提取登录日志，快速获取域用户对应的IP地址

tide

目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~

triplecross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.