v1rtu0l Goto Github PK

recycledgate

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

redteamnotes

红队笔记

remote_shellcodeloader

远程shellcode加载&权限维持+小功能

reverse_ssh

SSH based reverse shell

runaspasswd

A RunAs clone with the ability to specify the password as an argument.

scan4all

vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

sharkexec

内网渗透|红队工具|C#内存加载|cobaltstrike

sharp-suite

Also known by Microsoft as Knifecoat :hot_pepper:

sharpbeacon

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

sharpc2

Command and Control Framework written in C#

shc_bypass

内存加载shellcode绕过waf

shellcode-plain-sight

Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

sliver

Adversary Emulation Framework

spawn

Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks by spawning sacrificial process with Arbitrary Code Guard (ACG), BlockDll, and PPID spoofing.

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

suo5

A high performance http-socks tunnel

suspended-thread-injection

Another meterpreter injection technique using C# that attempts to bypass Defender

swagger-exp

A Swagger API Exploit

tamperingsyscalls

taskschedulermisc

Misc TaskScheduler Plays

threat_analysis_report

个人威胁（病毒样本）分析报告库

tinynuke

Botnet system from deep-web Russians forums. Tiny Nuke!

tomcat-jmxproxy-rce-exp

Apache Tomcat JMXProxy RCE

transitionalperiod

Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits

triplecross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

uacme

Defeating Windows User Account Control