idnu11 Goto Github PK

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

apkleaks

Scanning APK file for URIs, endpoints & secrets.

arbitrium-rat

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

av_evasion_tool

掩日 - 免杀执行器生成工具

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

charlotte

c++ fully undetected shellcode launcher ;)

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

cobalt_strike_wiki

Cobalt Strike系列

coremailuploadrce

Coremail任意文件上传漏洞POC

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2021-1675-lpe

Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527

cve-2021-2394

POC of CVE-2021-2394

cve-2022-39197

CobaltStrike <= 4.7.1 RCE

derbycon-2019files

This is a group of tools that I was planning on releasing During Derbycon 2019 talk if it was accepted or with a blogpost if not.

dll4shell

Shellcode launcher for AV bypass

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

doge-newsyscall

use shellcode as asm function

driedmango

GUI Exploit Tool For RedTeam

duckmemoryscan

检测绝大部分所谓的内存免杀马

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

genpac

PAC/Dnsmasq/Wingy file Generator, working with gfwlist, support custom rules.

get-system-techniques

guanyu

JVM runtime class loading protection agent.（JVM类加载保护agent）

hackjava

《Java安全-只有Java安全才能拯救宇宙》

idnu11.github.io

inscan

边界打点后的自动化渗透工具

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

jon

jon 是一款LINUX系统攻防工具箱，包含扫描，入侵，痕迹清理，木马，网站测试等各种黑客工具。Jon is a toolbox of Linux, including scanning, intrusion, trace cleaning, Trojan horse, website testing and other hacker tools.

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)