1rm Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

2022-hw-poc

2022 护网行动 POC 整理

520apkhook

对安卓APP注入MSF PAYLOAD，并且对手机管家进行BYPASS。

aksk_tool

AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI执行命令，OSS/COS/S3管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks【回调函数】

amber

Reflective PE packer.

antivirus_r3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

atompepacker

A Highly capable Pe Packer

awesome-profile-readme-templates

A collection of awesome readme templates to display on your profile

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

callbackdump

能过卡巴、核晶、defender等杀软的dump lsass进程工具

clipboardwindow-inject

CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback

cobalt-strike-profiles-for-edr-evasion

Cobalt Strike Profiles for EDR Evasion

cobaltstrike4.5_cdf

cobaltstrike4.5版本破/解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证等

commando-tools

Just the Tools folder from FireEye Commando-VM

cpppractice

C/C++练手

creeper-awww-man

Creeper? Awww man!

cs-remote-ops-bof

csplugin

自己开的cs插件

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

goencrypt

go语言封装的各种对称加密和非对称加密，可以直接使用，包括3重DES，AES的CBC和CTR模式，还有RSA非对称加密,ECC椭圆曲线的加密和数字签名

golang-injectors

go注入函数练习

golangbypassav

研究利用golang各种姿势bypassAV

gopurple

Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。