02bx Goto Github PK

sharpallthethings

The idea is to collect all the C# projects that are Sharp{Word} that can be used in Cobalt Strike as execute assembly command.

sharpattack

A simple wrapper for C# tools

sharpdecryptpwd

对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharpedrchecker

Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools.

sharpersist

sharphide

Tool to create hidden registry keys.

sharplocker

sharpnetcheck

在内网渗透过程中，对可以出网的机器是十分渴望的。在收集大量弱口令的情况下，一个一个去测试能不能出网太麻烦了。所以就有了这个工具，可配合如wmiexec、psexec等横向工具进行批量检测，该工具可以在dnslog中回显内网ip地址和计算机名，可实现内网中的快速定位可出网机器。

sharprdpbatch

批量检查远程桌面密码或ntlm是否正确

sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

sharpsqldump

内网渗透中快速获取数据库所有库名，表名，列名。具体判断后再去翻数据，节省时间。适用于mysql，mssql。

sharptoolsaggressor

内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~

sharpwmi

sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。

sharpwxdump

微信客户端取证，可获取用户个人信息(昵称/账号/手机/邮箱/数据库密钥(用来解密聊天记录))；支持获取多用户信息，不定期更新新版本偏移，目前支持所有新版本、正式版本

shellpop

Pop shells like a master.

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

shiroscan

Shiro<=1.2.4反序列化，一键检测工具

shr3dkit

Red Team Tool Kit

shuffle

Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.

sikulix1

SikuliX version 2.0.0+ (2019+)

sillyrat

A Remote Administration Tool (RAT/Trojan) (Development)

simpleremote

Remote Administration Tools

simpleremoter

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：https://github.com/zibility/Remote

simpleshellcodeinjector

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.

skyeye

对java、scala等运行于jvm的程序进行实时日志采集、索引和可视化，对系统进行进程级别的监控，对系统内部的操作进行策略性的报警、对分布式的rpc调用进行trace跟踪以便于进行性能分析

skyeye1

APK扫描工具,APK反编译工具

skyvern

Automate browser-based workflows with LLMs and Computer Vision

skywalking

APM, Application Performance Monitoring System

slack

一款GUI扫描器，功能涵盖网站扫描、端口扫描、企业信息收集、子域名暴破、FOFA&鹰图搜索、CDN识别等多功能的工具