empty2081 Goto Github PK

pplfault

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

pplmedic

Dump the memory of any PPL with a Userland exploit chain

practicalmalwareanalysis

恶意代码实战分析练习

printnightmare

process-injection

汇总了目前可以找到的所有的进程注入的方式，完成了x86/x64下的测试，不断更新中

processhider

Post-exploitation tool for hiding processes from monitoring applications

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

psexec_noinstall

Repository contains psexec, which will help to exploit the forgotten pipe

psmapexec

A PowerShell tool that takes strong inspiration from CrackMapExec.

py

飘云ark（pyark）

pycdc

C++ python bytecode disassembler and decompiler

python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

python-x86-obfuscator

This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.

qakbot

qq-tim-elevation

CVE-2023-34312

qqwry.dat

自动更新的纯真ip库，每天自动更新

quarkspwdump

Dump various types of Windows credentials without injecting in any process.

quasar

Remote Administration Tool for Windows

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

raccoon5

小浣熊漫画CMS5.0

rad

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

rasmanpotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

rattler

Automated DLL Enumerator

rdpcredentialstealer

RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++

reaper

「💀」Proof of concept on BYOVD attack

rebeacon_forclang

Beacon compiled using clang

rebeacon_src

recyclepersist

implementation of Persistence via Recycle Bin by adding "open\command" subkey to the "HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell" key and changing its value to the implant path