apkc Goto Github PK

joomla-sqlinjection

Collection about PoC for sql injection on Joomla

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jwt-base-app

kaynstrike

UDRL for CS

kdstab

BOF combination of KillDefender and Backstab

kdu

Kernel Driver Utility

kekeo

A little toolbox to play with Microsoft Kerberos in C

kerberoast

kerbeus-bof

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

keres

Persistent Powershell backdoor tool

kernel-mii

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

kernel-process-hollowing

Windows x64 kernel mode rootkit process hollowing POC.

kernel_vadinjector

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

killdefender_bof

Beacon Object File implementation of pwn1sher's KillDefender

killdefenderbof

Beacon Object File PoC implementation of KillDefender

killer

Is a tool created to evade AVs and EDRs or security tools.

kirbi2hashcat

Convert kirbi ticket from mimikatz into hashcat format to crack it

kittystager

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to be able to have a web server and some kitten and be able to use the with any shellcode.

krakenmask

Sleep obfuscation

krbjack

A Kerberos AP-REQ hijacking tool with DNS unsecure updates abuse.

krbrelay

Framework for Kerberos relaying

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

krbuacbypass

UAC Bypass By Abusing Kerberos Tickets

ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

lab

ladongo

LadonGO 4.5 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

latloader

PoC module to demonstrate automated lateral movement with the Havoc C2 framework.

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

lazzzy

laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.