secuplus Goto Github PK

alicloud-tools

China Aliyun ECS Tools

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

as_webshell_venom

免杀webshell无限生成工具蚁剑版

badcode

恶意代码逃逸源代码 http://payloads.online

batchconfig

Create custom Windows batch files from a configuration file

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

bypassav-1

免杀shellcode加载器

cobalt-arsenal

My collection of battle-tested Aggressor Scripts for Cobalt Strike 4.0+

cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

cve-2018-13379

CVE-2018-13379

dirtycow

exe2powershell

exe2powershell - exe2bat reborn for modern Windows

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

ginger

A security assessment tool for Hitachi Vantara's Pentaho Business Analytics platform.

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

godzilla

哥斯拉

gogsownz

Gogs CVEs

goscan

GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用

goyiyi

提供一个Golang 的bypass AV 思路。

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

inlinewhispers

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)

jenkins-decrypt

Credentials dumper for Jenkins

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

juicypotato

Modifying JuicyPotato to support load shellcode and webshell

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

lazagne

Credentials recovery project

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

mysql-magic

dump mysql client password from memory

nimshellcodeloader

使用nim编写的shellcode加载器