1rm Goto Github PK

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hiddenvnc

A simple hidden vnc.

hijacklibs

Project for tracking publicly disclosed DLL Hijacking opportunities.

inject-assembly

Inject .NET assemblies into an existing process

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

lockdexedemo

A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/

masqueradingpeb

Maquerade any legitimate Windows binary by changing some fields in the PEB structure

nc6.5_beanshell

用友NC BeanShell

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

ola

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pokemon-shellcode-loader

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

pyshell

Multiplatform Python WebShell

redteamcsharpscripts

C# Script used for Red Team

reptile

LKM Linux rootkit

robotgo

RobotGo, Go Native cross-platform GUI automation @vcaesar

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

schtask-bypass

免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus

screenshooter

C# program to take a full size screenshot or a recording of the user's desktop. Takes in 0-3 flags

sharp-dumpkey

基于C#实现的获取微信数据库密钥的小工具

sharpeventpersist

Persistence by writing/reading shellcode from Event Log

shootback

a reverse TCP tunnel let you access target behind NAT or firewall

skrull

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

sunloginclient_rce

🔆CNVD-2022-10270

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

uacme

Defeating Windows User Account Control

universal

Universal Shared Library User-space Loader

webshell-sample

收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。

wechat-export

获取微信聊天记录数据库密钥并导出聊天记录，各版本通用。