needafuture Goto Github PK

angr

A powerful and user-friendly binary analysis platform!

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

barf-project

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

beroot

Privilege Escalation Project - Windows / Linux / Mac

bootcode_parser

A boot record parser that identifies known good signatures for MBR, VBR and IPL.

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

chainsaw

Rapidly Search and Hunt through Windows Event Logs

cobalt_strike_wiki

Cobalt Strike系列

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution.

ctf-writeups

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27

deflat

use angr to deobfuscation

dorabox

DoraBox - 基础Web漏洞训练靶场

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

empire

Empire is a PowerShell and Python post-exploitation agent.

excel4-dcom

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

excelntdonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

how2heap

A repository for learning various heap exploitation techniques.

idasignsrch

IDA_Signsrch in Python

inscan

边界打点后的自动化渗透工具

invoke-obfuscation

PowerShell Obfuscator

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

lethalhta

Lateral Movement technique using DCOM and HTA

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.