gitttttbottttt Goto Github PK

getwindowscredentials

通过WindowsAPI获取用户凭证，并保存到文件中

gofilebinder

golang免杀捆绑器

googlevoice

注册 Google Voice 号码详细步骤

gopacker

UPX-like packer written in Go

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

gsocks5

golang for socks5

hae

HaE - BurpSuite Highlighter and Extractor

hellsgatenim

A quick example of the Hells Gate technique in Nim

huan

Encrypted PE Loader Generator

hunting-active-directory

个人整理的一些域渗透Tricks，可能有一些错误。

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

invisibilitycloak

Proof-of-concept obfuscation toolkit for C# post-exploitation tools

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11（无弹窗版）

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jsphorse

结合反射调用、动态编译、BCEL、defineClass0，ScriptEngine、Expression等技术的一款免杀JSP Webshell生成工具

juicypotato

JuicyPotato修改版

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

kinghamlet

Process Ghosting Tool

kkndme_tianya

天涯 kkndme 神贴聊房价

kraken

Kraken, a modular multi-language webshell coded by @secu_x11

ldapkit

自用的LDAP测试工具，一键启动

link

link is a command and control framework written in rust

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

lsassy

Extract credentials from lsass remotely

maildog

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.