hayasec Goto Github PK

go-shellcode

a repository of Windows Shellcode runners and supporting utuilies. The applications load and execute Shellcode using various API calls or techniques.

hayasec.github.io

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

interesting-keys

Interesting collected (leaked) encryption/decryption keys

k8s-mind-map

K8S安全攻防思维导图 | Docker安全攻防思维导图

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

koppeling

Adaptive DLL hijacking / dynamic export forwarding

lazagne

Credentials recovery project

ldapdomaindump

Active Directory information dumper via LDAP

lsasspotato

memmod

Fork of Wireguard's Memmod

microbackdoor

Small and convenient C2 tool for Windows targets

movekit

Cobalt Strike kit for Lateral Movement

msbuildapicaller

MSBuild Without MSBuild.exe

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

myexploit

OAExploit一款基于产品的一键扫描工具。

nextnet

nextnet is a pivot point discovery tool written in Go.

ntdsaudit

An Active Directory audit utility

ntlmquic

POC tools for exploring SMB over QUIC protocol

offensivedlr

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

oxid-find

Find the host network card address through OXID Resolver

petitpotam

替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, a series of local rights escalation methods have been realized

pezor

Read the blog post here: https://iwantmore.pizza/posts/PEzor.html

physmem2profit

Physmem2profit can be used to create a minidump of a target hosts' LSASS process by analysing physical memory remotely

poc-collect

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新

powerforensics

PowerForensics provides an all in one platform for live disk forensic analysis

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

printnightmare

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

procmonx

Extended Process Monitor-like tool based on Event Tracing for Windows