unknowsec Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2022-hw-poc

2022 护网行动 POC 整理

aboutsecurity

用于渗透测试的 payload 和 bypass 字典.

abuseazureapipermissions

Abuse Azure API permissions for red teaming

active-directory-pentest-notes

个人域渗透学习笔记

ad-pentest-notes

用于记录内网渗透(域渗透)学习 :-)

awesome_shell_loaders

shellcode-loaders集合列表

bypassuac

Use ICMLuaUtil to Bypass UAC!

cobaltstrike4.5_cdf

cobaltstrike4.5版本破/解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证等

darkpulse

darkPulse是一个用go编写的shellcode Packer，用于生成各种各样的shellcode loader，

dcsec

域控安全one for all

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

giu

Cross platform rapid GUI framework for golang based on Dear ImGui.

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

golangcallbackloader

golang实现的回调函数加载器库

hack-fastjson-1.2.80

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

javasec

JAVA安全

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

nmap_bypass_ids

Nmap&Zmap特征识别，绕过IDS探测

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

payloadsallthethings

A list of useful payloads and bypass for Web Application

pentestdb

各种数据库的利用姿势

pocs

POCS

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

redteam-tips

关于红队方面的学习资料

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

remote_shellcodeloader

远程shellcode加载&权限维持+小功能

remotekrbrelay

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework