salemarsm Goto Github PK

40k-nuclei-templates

40,000+ Nuclei templates for security scanning and detection across diverse web applications and services

adrena

Software Protector

anti-delete

Protects deletion of files with a specified extension using a kernel-mode driver.

anti-ransomware-minifilter

A minifilter driver for detecting and blocking ransomware virus

archive

armadito-av

Armadito antivirus main repository

artillery

CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administrator.

atheon

Anti-Ransomware Toolkit with kernel drivers.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

blackbone

Windows memory hacking library

breakcyserver

byovdkit

bring your own vulnerable driver

c2reverseproxy

一款可以在不出网的环境下进行反向代理及cs上线的工具

cidlldemo

Use ci.dll API for validating Authenticode signature of files

claimsman

Software for monitoring users' file access

creds

Some usefull Scripts and Executables for Pentest & Forensics

cve-2018-19320

Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)

darkloadlibrary

LoadLibrary for offensive operations

dataprotector

A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.

dynmx

Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!

easyring0

Windows kernel samples

firefox-webinject

Firefox webInjector capable of injecting codes into webpages using a mitmproxy.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fsdefender

Technion CS Ransomware Project: Writing Windows Mini-Filter Driver to protect PC from Ransomware

go-stealer

Cookie & Logins stealer for Firefox + Chrome, demonstration only

google_explorer

Google mass exploit robot in python

gowmiexec

Really stupid re-implementation of invoke-wmiexec

handlekatz

PIC lsass dumper using cloned handles

hidden

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

hidedriver

之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。