msf-ntdll Goto Github PK

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

signaturegate

Weaponized HellsGate/SigFlip

signthief

Windows PE Signature Thief in C++

silent_pass

A cross-platform password harvester for known softwares (Chrome / Chromium, Firefox, Internet Explorer / MS Edge, FileZilla)

silentmoonwalk

PoC Implementation of a TRUE call stack spoofer

simba-

Port of MBA Solver SiMBA to C/C++

simpleinjector

A simple injector that uses LoadLibraryA

simplepeloader

In-Memory PE Loader

simpleremoter

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：https://github.com/zibility/Remote

simpleshellcodeinjector

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.

simplexorshellcode

XOR shellcode,and use loader load it

single-dose

Generate process injection binaries

skcrypter

Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+

skrull

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

slcx

端口转发工具，绕过流量安全检测。

sleepycrypt

A shellcode function to encrypt a running process image when sleeping.

slidecode

XOR-based shellcode encoder

smb-session-spoofing

smbdoor

Windows kernel backdoor via registering a malicious SMB handler

smmbackdoorng

Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

sneakyrun

Some stuff for PHD2021

sniperphish

SniperPhish - The Web-Email Spear Phishing Toolkit

socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

spacerunner

This tool enables the compilation of a C# program that will execute arbitrary PowerShell code, without launching PowerShell processes through the use of runspace.

spark

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

spartacus

Spartacus DLL Hijacking Discovery Tool

splitinjection

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

spoolsploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.

spoolsystem

Print Spooler Named Pipe Impersonation for Cobalt Strike