sacwtv Goto Github PK

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

electron-browser-shell

A minimal, tabbed web browser with support for Chrome extensions—built on Electron.

fastjson_rce_tool

fastjson漏洞检测辅助工具， JNDI服务利用工具 RMI/LDAP，支持部分场景回显，内存shell等辅助利用神器

fuzzbunch

NSA finest tool

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

ghidra

Ghidra is a software reverse engineering (SRE) framework

google-access-helper

谷歌访问助手破解版

hershell

Multiplatform reverse shell generator

home

homework-of-go

Go code examples of my blog.

hotpatch

Hot patching executables on Linux using .so file injection

iathijackgenerate

白加黑的快速生成器（针对IAT类型）

inject-dll-by-process-doppelganging

Process Doppelgänging

injection

Windows process injection methods

inlineexecute-assembly

InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assembly execution as an alternative to Cobalt Strikes traditional fork and run execute-assembly module

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

jektor

A Windows user-mode shellcode execution tool that demonstrates various techniques that malware uses

jpg-png-exploit-downloader-fud-cryter-malware-builder-cve-2022

Vulnerability Disclosure Timeline Closer inspection of the Exploit JPG content reveals the malicious link as well as the URL Download and Execute of the tool used to generate the Exploit JPG from Python encrypted code content which we also implement in couple of our builders.Silent JPG Exploit There are multiple Exploit JPG in Silent JPG Exploit, a package commonly used by web services to process Exploit JPG File. One of the vulnerabilities can lead to remote code execution (RCE) if you process user submitted JPG. The exploit for this vulnerability is being used in the wild.Why Are You Disclosing A Exploit JPG

kar98k_public

koadic

Koadic C3 COM Command & Control - JScript RAT

letsgo

Shellcode Injection via Callbacks and Steganography.

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

ljd

LuaJIT raw-bytecode decompiler

luajit-decomp

LuaJIT decompiler

luajit-decompiler

https://gitlab.com/znixian/luajit-decompiler

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

mimic

Hide processes as a normal user in Linux.

mynotes

个人笔记

nautilusproject

A collection of weird ways to execute unmanaged code in .NET