cl4ym0re Goto Github PK

pr0cess

some gadgets about windows process and ready to use :)

printnightmare

redteamer

红方人员作战执行手册

run

润学全球官方指定GITHUB，整理润学宗旨、纲领、理论和各类润之实例

sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcodewrapper

Shellcode wrapper with encryption for multiple target languages

shellcode_xor

shellcode obfuscation

signed-rundll

.exe files signed by microsoft, use it like rundll32 for evasion.

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

sliver

Adversary Emulation Framework

slopshell

the only php webshell you need.

some_pe_files

Some PE files for remote loading.

ssdt.recover.21yu3

绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook

stopdefender

Stop Windows Defender programmatically

svchostdemo

Demo service that runs in svchost.exe

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

sysminidumpwd

A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)

syswhispers2_x86

X86 version of syswhispers2 / x86 direct system call

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

threadstackspoofer

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

uacme

Defeating Windows User Account Control

uac_wenpon

UAC_wenpon

vx-api

Collection of various WINAPI tricks / features used or abused by Malware

vx-api-1

Collection of various malicious functionality to aid in malware development

webldr

A shellcode loader that fetches shellcode remotely.

win32_offensive_cheatsheet

Win32 and Kernel abusing techniques for pentesters

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winsw

A wrapper executable that can run any executable as a Windows service, in a permissive license.