liuliujiu Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021hvv_vul

2021hvv漏洞汇总

adaclscanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

bof_helper

Beacon Object File (BOF) Creation Helper

bypassanti-virus

免杀姿势学习、记录、复现。

caixukun

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

cobaltstrikesource

Cobaltstrike4.1 Source

cve-2022-39197-patch

CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

excle-

forkplayground

An implementation and proof-of-concept of Process Forking.

fully-undetectable-techniques

fuso

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

gh0st

gh0st built on VS 2017

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

havoc

The Havoc Framework

heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

hellohacker

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

ioringreadwriteprimitive

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

killdefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

lazfinder

快速遍历目标目录中所有指定后缀文件中包含的敏感信息

liuliujiu.github.io

work

luaghost

A Lua WebShell runs on OpenResty and implements with AES encryption

oneforall

OneForAll是一款功能强大的子域收集工具

proxylogon

ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

random_c2_profile

Cobalt Strike random C2 Profile generator