msf-ntdll Goto Github PK

red_team

Some scripts useful for red team activities

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

reflectivebase64dll

This is a project to receive Base64 data and decode it in process

reflectivedll_patch

reflectivedllinjection-notes

ReflectiveDLL学习代码

reflectivedllpatch

reflectivedllrefresher

Universal Unhooking

registry-recon

Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon

remote

远程控制项目

remote-1

参考Gh0st源码，实现的一款PC远程协助软件，拥有远程Shell、文件管理、桌面管理、消息发送等功能。

remote_shellcodeloader

远程shellcode加载&权限维持+小功能

remotefunctions

LoadLibrary, GetModuleHandle and GetProcAddress calls for remote processes

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

retoolkit

Reverse Engineer's Toolkit

reverserdp_rce

reverseshell

Stealthy C++ based Windows backdoor

revp

Reverse HTTP proxy that works on Linux, Windows, and macOS

roguepotato

Another Windows Local Privilege Escalation from Service Account to System

roguewinrm

Windows Local Privilege Escalation from Service Account to System

ropinjector

Rite Of Passage ROP Injector

rottenpotatong

New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.

rpc-backdoor

A basic emulation of an "RPC Backdoor"

rpcssimpersonator

Privilege Escalation Via RpcSs svc

rubeus-rundll32

Run Rubeus via Rundll32

run-as-attached-networked

RunAsAttached is a program to run a console as another user and keep new console attached to caller console. Support reverse shell mode (Ex: Netcat)

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

runpe

C# Reflective loader for unmanaged binaries.

runpe-in-memory

Run a Exe File (PE Module) in memory (like an Application Loader)

sakeinject

Windows PE - TLS (Thread Local Storage) Injector in C/C++

sandboxdefender

C# code to Sandbox Defender (and most probably other AV/EDRs).