4c5a59 Goto Github PK

4c5a59.github.io

backupoperatortoda

From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

damit5.github.io

个人部分知识总结

daydayexp

支持自定义Poc文件的图形化漏洞利用工具

defender-exclusions-creator-bof

defender_exclusions-bof

A BOF to determine Windows Defender exclusions.

deskbypass

dingtalk-rce

dllmainhijacking

Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

fofa

fuzzing-dicts

Web Security Dictionary

gobypassav-shellcode

免杀shellcode加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

lumenim

Lumen IM 是一个网页版在线聊天项目，前端使用 Naive UI + Vue3，后端采用 GO 开发。

mysql-

nucleitp

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

oneshell

Reverse shell listener and payload generator designed to work on most Linux targets

operatorskit

Collection of Beacon Object Files (BOF) for Cobalt Strike

password

pe_to_shellcode

Converts PE into a shellcode

pengcode

EXE转ShellCode工具

pillager

Pillager是一个适用于后渗透期间的信息收集工具

pilot-web

Pilot-Web：一款基于PythonFlask框架开发的前后端分离式渗透测试&漏洞挖掘Web靶场，内置WP与知识库的集成式教学靶场。

pinduoduo_backdoor_demo

pinduoduo backdoor

poolpartybof

A beacon object file implementation of PoolParty Process Injection Technique.

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)