11skk Goto Github PK

dumpnparse

A Combination LSASS Dumper and LSASS Parser. All Credit goes to @slyd0g and @cube0x0.

edd

Enumerate Domain Data

edrs

elevate-bypass

bypassuac、administrator->system提权的免杀小工具，可过Defender、360、卡巴等

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

evilgophish

evilginx2 + gophish

exploitation-course

Offensive Software Exploitation Course

exploitkitpub

f403

用于渗透测试中对40x页面进行bypass并发扫描,采用go编写

filelesspeloader

Loading Remote AES Encrypted PE in memory , Decrypted it and run it

forgecert

"Golden" certificates

fud-uuid-shellcode

gadgettojscript

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.

get-rbcd-threaded

Tool to discover Resource-Based Constrained Delegation attack paths in Active Directory environments

getfgpp

Get Fine Grained Password Policy

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

git-tips

:trollface:Git的奇技淫巧

go-windapsearch

Utility to enumerate users, groups and computers from a Windows domain through LDAP queries

goad

game of active directory

godpotato

gowxdump

SharpWxDump的Go语言版。微信客户端取证，获取信息(微信号、手机号、昵称)，微信聊天记录分析(Top N聊天的人、统计聊天最频繁的好友排行、关键词列表搜索等)

group3r

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

hackerone-reports

Top disclosed reports from HackerOne

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hardhatc2

A c# Command & Control framework

havoc

The Havoc Framework

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

home-grown-red-team

homework-of-c-sharp

C Sharp codes of my blog.

ifaultrepelevateddatacollectionuac