hayasec Goto Github PK

.net-profiler-dll-hijack

Implementation of the .NET Profiler DLL hijack in C#

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

alicloud-tools

阿里云ECS、策略组辅助小工具

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

artifacts-kit

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

awddefense

Some tools for CTF off line

bettersafetykatz

BetterSafetyKatz

blackbone

Windows memory hacking library

bypass_waf

waf自动爆破(绕过)工具

caesar

一个全新的敏感文件发现工具

cecil

Cecil is a library to inspect, modify and create .NET programs and libraries.

chunk-proxy

corehook

A library that simplifies intercepting application function calls using managed code and the .NET Core runtime

couchdb_exp

couchdb remote command exec.

crossnet-beta

红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

ddoor

DDoor - cross platform backdoor using dns txt records

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

defendercheck

Identifies the bytes that Microsoft Defender flags on.

dict

dllhijacktest

DLL and PowerShell script to assist with finding DLL hijacks

doge-loader

Cobalt Strike Shellcode Loader by Golang

dotnetdebug

A simple POC to demonstrate the power of .NET debugging for injection

easynet

Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library. Algorithm: Data <-> GZip <-> AES-256 <-> Base64.

fakelogonscreen

Fake Windows logon screen to steal passwords

genesis

All generic functions for Go you ever need!

ghostbuild

GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects

ghostloader

GhostLoader - AppDomainManager - Injection - 攻壳机动队