whiteodin Goto Github PK

160-crackme

对160个Crackme的详细分析记录

awesome-anti-forensic

Tools and packages that are used for countering forensic activities, including encryption, steganography, and anything that modify attributes. This all includes tools to work with anything in general that makes changes to a system for the purposes of hiding information.

awesome-lists

Awesome Security lists for SOC/CERT/CTI

awesome-poc

一个各类漏洞POC知识库

awesome-reversing

A collection of resources to learn Reverse Engineering from start!

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

cve-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator

cve-2023-42442

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

cve-2024-27804

POC for CVE-2024-27804

cve-2024-4577

CVE-2024-4577 is a critical vulnerability in PHP affecting CGI configurations, allowing attackers to execute arbitrary commands via crafted URL parameters.

cve-2024-4577-php-rce

全球首款利用PHP默认环境的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP，共享原创EXP，支持SSRF，支持绕过WAF。The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WAF bypass.

cve-2024-6387-poc

de4dot_mod

de4dot mod by HTC & Ngôn Nguyễn

defenderyara

Extracted Yara rules from Windows Defender mpavbase and mpasbase

dll_to_exe

Converts a DLL into EXE

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

ghostpack-compiledbinaries

Compiled Binaries for Ghostpack (.NET v4.0)

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

havoc

The Havoc Framework.

hfish

hyper-v-tools

Different tools for Microsoft Hyper-V researching

ida_plugin_antidebugseeker

Automatically identify and extract potential anti-debugging techniques used by malware.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

ip-hunter

Hunt for C2 servers and phishing web sites using VirusTotal API , you can modify code to kill the malicious process

jimureport

🔥「数据可视化报表工具」类似excel操作风格，在线拖拽完成报表设计！功能涵盖: 报表设计、图形报表、打印设计、大屏设计等，完全免费！秉承“简单、易用、专业”的产品理念，极大的降低报表开发难度、缩短开发周期、解决各类报表难题。

jomungand

Shellcode Loader with memory evasion

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kematian-stealer

The best and completely open source Stealer

kisak-strike

100% Open Source CSGO