m00nt0 Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

activedirectoryredteaming

Tools & TTP's for Active Directory Red Teaming

adreaper

A fast enumeration tool for Windows Active Directory Pentesting written in Go

ahmyth-android-rat

Android Remote Administration Tool

automated-subdomain-takeover

awskeytools

aws云平台 accessKey 泄漏利用工具

backdoors

Simple linux backdoors and hiding techniques

badassmacros

BadAssMacros - C# based automated Malicous Macro Generator.

black

Windows权限维持工具（Windows_shell）

blogs

PentestNotes

bypassanti-virus

免杀姿势学习、记录、复现。

bypassshell

anti AV

bypassuac

bypass uac

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

checkvm-sandbox

source code

civetcat

Civet cat 狸猫 远控 (突破防火墙限制)

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

cve-2021-30573-poc-google-chrome

Google Chrome Use After Free vulnerability reported by S4E Team

cve-2021-31956-exp

cve-2022-0995

CVE-2022-0995 exploit

cve-2022-21882

cve-2022-30190-follina-office-msdt-fixed

CVE-2022-30190-follina.py-修改版，可以自定义word模板，方便实战中钓鱼使用。

dllprotect

dll文件加解密和内存加载

dns-proxy

Simple DNS Proxy written in Node.JS. Override hosts, domains, or tlds. Redirect certain domains to different nameservers.

domaintools

内网域渗透小工具

eva2

Another version of EVA using anti-debugging techs && using Syscalls

exploits

fakelogonscreen

Fake Windows logon screen to steal passwords

fastjson-local-echo

基于dbcp的fastjson rce 回显