q-a-z Goto Github PK

detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

dettect

Detect Tactics, Techniques & Combat Threats

dhook

DHook是一个交互式自定义动态hook的工具。通过javaagent+ASM技术对运行时的java应用进行字节码修改，并可以以界面和配置文件的方式来增加hook点，修改执行方法的返回值以及参数等。如破解cs等

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

dllsforhackers

Dll that can be used for side loading and other attack vector.

dlprobe

Implementation of LTE downlink sniffer based on srsRAN library.

dostackbufferoverflowgood

dotnetinjections

Loading Assemblies Into Processes, the All Natural Organic way

dropper-shellcode-into-explorer.exe

A dropper that decrypts encrypted xor payload and can inject it in explorer.exe proccess

efspotato

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

enb

eNB s1 Emulator - S1AP and S1-U interfaces.

eventcleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.

f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

foureye

AV Evasion Tool For Red Team Ops

geacon_apt

geacon for apt profile

gl-ar300m-wifipineapple

Wifi PIneapple for GL-AR300M

gost

GO Simple Tunnel - a simple tunnel written in golang

goyiyi

提供一个Golang 的bypass AV 思路。

gsm-network

Basic 2G sms and voice calls with a LimeNET Micro v2.1 and the osmocom nitb stack

gsocket

Connect like there is no firewall. Securely.

halosgate-ps

Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes

hiding-your-syscalls

Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction within NTDLL.

honeycred

Utility to inject honey tokens into lsass.

huan

Encrypted PE Loader Generator

icebreaker

icssecurityscripts

Industrial Security Scripts

impacket

Impacket is a collection of Python classes for working with network protocols.

impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.