0xmafty Goto Github PK

amass

OWASP 開源情資工具

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

certipy

專打AD_CS ESC1-ESC8

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

fastfluxanalysis

Scripts to detect Fast-Flux and DGA using DNS query responses

introduce-myself

invoke-psobfuscation

An in-depth approach to obfuscating the individual components of a PowerShell payload whether you're on Windows or Kali Linux.

ldeep

In-depth ldap enumeration utility

netexec

The Network Execution Tool

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

noargs

NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into Windows APIs to dynamically manipulate the Windows internals on the go. This allows NoArgs to alter process arguments discreetly.

nycu-hw

ocd-mindmaps

AD目錄攻擊的所有方法

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

pezor

Open-Source Shellcode & PE Packer

rbcd-attack

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

sliver

開源C2

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

symboliclink-testing-tools

terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

veil

Veil 3.1.X (Check version info in Veil at runtime)

webshell

免杀webshell生成工具

webshell-loader

ASPX内存执行shellcode,绕过Windows Defender（AV/EDR）