imstephen Goto Github PK

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

geoip2-cn

最小巧、最准确、最全面、最实用的**大陆 GeoIP2 数据库及 IP 地址段

heroku-xray-trojangows-ssws

herokuxray

使用Heroku部署Xray高性能代理服务，通过ws传输的 (vmess、vless、trojan shadowsocks、socks)等协议

inceptor

Template-Driven AV/EDR Evasion Framework

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

luwu

红队基础设施自动化部署工具

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

maliciousclickoncemsbuild

Basic C# Project that will take an MSBuild payload and run it with MSBuild via ClickOnce.

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

matrix-appservice-wechaty

Wechaty [Matrix] Application Services Bridge

mdat

MDAT - Multiple Database Attacking Tool

mobilehackersweapons

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

modern_red-team_infrastructure

nimhollow

Nim implementation of Process Hollowing using syscalls (PoC)

nimlinewhispers

A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.

ninja

Open source C2 server created for stealth red team operations

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

pandasniper

Linux C2 框架demo，为期2周的”黑客编程马拉松“，从学习编程语言开始到实现一个demo的产物

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-tools

A collection of more than 140+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

php-bypass-collection

收集的一些各种语言的免杀webshell

powershellforpentesters

Course repository for PowerShell for Pentesters Course

pybeacon

A collection of scripts for dealing with Cobalt Strike beacons in Python

pypykatz

Mimikatz implementation in pure Python