q-a-z Goto Github PK

invoke-bof

Load any Beacon Object File using Powershell!

irm

Incident Response Methodologies

jackdaw

gather gather gather

judas

kali-pi

Sticky Fingers Kali Pi

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

kdu

Kernel Driver Utility

keyboard-walk-generators

Generate Keyboard Walk Dictionaries for cracking

koh

The Token Stealer

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

liquidsnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

lovely-potato

Automating juicy potato local privilege escalation exploit for penetration testers.

lsasssilentprocessexit

Command line interface to dump LSASS memory to disk via SilentProcessExit

lyncsmash

locate and attack Lync/Skype for Business

lyncsniper

LyncSniper: A tool for penetration testing Skype for Business and Lync deployments

misctools

Miscellaneous Tools

morphaes

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

natpass

新一代主机管理工具，支持web shell和web桌面，居家办公神器

negoexrelay

netelf

Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.

netloader

Loads any C# binary in mem, patching AMSI + ETW.

netntlm

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP

nimlinewhispers2

A tool for converting SysWhispers2 syscalls for use with Nim projects

ninja

Open source C2 server created for stealth red team operations

notes

Notes

obfuscatetest

Obfuscate C# source code, so the relationship between the definition and the function call, cannot be detected (not at runtime)

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

onelistforall

Rockyou for web fuzzing