jxpsx Goto Github PK

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具

redteamer

红方人员作战执行手册

redteamtools

记录自己编写、修改的部分工具

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

regexp

Registry Explorer - enhanced Registry editor/viewer

requesttemplate

双语双端内网扫描以及验证工具

research

s2-062

远程代码执行S2-062 CVE-2021-31805验证POC

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scfproxy

A little proxy tool based on Tencent Cloud Function Service.

security-ppt

Security-related Slide Presentation（大安全各领域各公司各会议分享的PPT）

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

security_service_interviews

安服面经☞渗透测试/代码审计/安全研究

seeyonexploit-gui

致远OA综合利用工具V1.0

serverlessscan

云函数扫描器实现代码

shadowcoerce

MS-FSRVP coercion abuse PoC

sharpsniper

Find specific users in active directory via their username and logon IP address

sharpxdecrypt

Xshell全版本密码解密工具

shellcode_memory_loader

基于Golang实现的Shellcode内存加载器,共实现3中内存加载shellcode方式,UUID加载,MAC加载和IPv4加载,目前能过主流杀软(包括Windows Defender)

shellcodeframe

使用纯C/C++编写的ShellCode生成框架

shiro_decode

Shiro反序列化流量自动解密脚本

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

shortpayload

如何将Java反序列化Payload极致缩小

shuize_0x727

信息收集自动化工具

socbook

安全运营部署指南

solr_rce

Apache Solr RCE via Velocity template

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

spoolfool

Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)