crisprss Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi_bypass_in_2023

Amsi Bypass payload that works on Windwos 11

antivirus_r3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

arbitraryfilereadlist

CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)

ares

Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique

as-exploits

**蚁剑后渗透框架

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

avcleaner

C/C++ source obfuscator for antivirus bypass

awd-watchbird

A powerful PHP WAF for AWD

awd_auto_attack

一个自动化写入php不死马/进程守护马，批量获得flag的线下赛工具

awesome-cybersecurity-blueteam-cn

网络安全 · 攻防对抗 · 蓝队清单，中文版

badpods

A collection of manifests that will create pods with elevated privileges.

behinderclientsource

❄️冰蝎客户端源码-V4.0.6🔞

bettersafetykatz

Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime patches signatures and uses SharpSploit DInvoke to PE-Load into memory.

blackhat_usa2022

BLACKHAT USA2022 PDF Public

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

burpshiropassivescan

一款基于BurpSuite的被动式shiro检测插件

bypass_go

参考CS的Bypass插件+分离免杀**改造

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

bypasssuper

Bypass 403 or 401 or 404

bypassuseradd

通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化

c2reverseproxy

一款可以在不出网的环境下进行反向代理及cs上线的工具

chaos-me-javascript-v8

零基础入门V8引擎漏洞挖掘

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

cliws

Cross platform interactive bind/reverse PTY shell

clroxide

A rust library that allows you to host the CLR and execute dotnet binaries.

cobalt4.4

WIPE YOUR ASS WITH THE REAL COBALT STRIKE

code-encryptor-plus

使用JNI加密字节码，通过JVMTI解密字节码以保护代码，支持自定义包名和密钥，使用魔法禁止黑客dump字节码

crisprss