v1rtu0l Goto Github PK

process-inject

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

puti

pwdbud

一款SRC密码生成工具，尝试top字典无果后，可以根据域名、公司名等因素来生成特定的字典

pxplan

CVE-2022-2022

python3-c2-course-code-modules

Modules for my C2 course students to use for their own projects.

rdpthief

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

readphys

r/w virtual memory without attach

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

rebeacon_src

recycledgate

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

redteamnotes

红队笔记

reflective-driver-loader

remote_shellcodeloader

远程shellcode加载&权限维持+小功能

remotetlscallbackinjection

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

reverse_ssh

SSH based reverse shell

rpcsdemo

runaspasswd

A RunAs clone with the ability to specify the password as an argument.

rwxmeme

State of the art DLL injector that took 20 minutes to make

scan4all

vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

scmuacbypass

screenshot-bof

screenshotbofplus

Take a screenshot without injection for Cobalt Strike

scshell

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

secdictionary

实战沉淀字典

security-paper

（与本人兴趣强相关的）各种安全or计算机资料收集

sharkexec

内网渗透|红队工具|C#内存加载|cobaltstrike