b0y1n4o4 Goto Github PK

hostingclr

Executing a .NET Assembly from C++ in Memory (CLR Hosting)

injection

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

invoke-loginprompt

Invokes a Windows Security Login Prompt and outputs the clear text password.

invoke-wmilm

java-gate

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

javaweb-sec

攻击Java Web应用-[Java Web安全]

jsp-webshell

kerberosuserenum

Kerberos accounts enumeration taking advantage of AS-REQ

ketshash

A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.

ladongo

Ladon Scanner For Golang (Full platform penetration scanner framework)LadonGo一款开源渗透扫描器框架，使用它可轻松批量探测C段、B段存活主机、指纹识别、端口扫描、密码爆破、远程执行、高危漏洞检测等。2.0版本包含15个模块功能，高危漏洞检测MS17010、SmbGhost，远程执行SshCmd、WinrmCmd，密码爆破SmbScan、SshScan、FtpScan、MysqlScan、WinrmScan，存活探测/信息收集/指纹识别PingScan、IcmpScan，BannerScan、HttpTitle、WeblogicScan，端口扫描PortScan。

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

lsasspotato

luckymoney

Wechat And DingDing LuckyMoney

m0chan.github.io

m0chan.github.io

malleable-c2-randomizer

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

memscan-1.0

Scan and edit memory using WinAPI functions such as ReadProcessMemory and WriteProcessMemory

micro8

Gitbook

morphhta

morphHTA - Morphing Cobalt Strike's evil.HTA

mstsc-path-traversal

mstsc.exe Path Traversal to RCE POC

msvpwn

muddyc3

Leaked Muddyc3 C2 source.

myapplockerbypasssummary

Simple APPLocker bypass summary

ncomputerinfo

netntlmtosilverticket

SpoolSample -> Responder w/NetNTLM Downgrade -> NetNTLMv1 -> NTLM -> Kerberos Silver Ticket

offensive-security-oscp-cheatsheets

Red Teaming Experiments / Offensive Security / OSCP & Pentesting Cheat Sheets and more

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

outlook

一款OutLook信息收集工具

passwordchangenotify

when pass change ,send the pass to remote host

pcap-attack

PCAP Samples for Different Post Exploitation Techniques