anti-ghosts Goto Github PK

shellcode_encoder

x64 printable shellcode encoder

shellcode_loader

ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。

shellcode_template_in_c

shellcodeloader-1

该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用

shothv

ShotHv

sigma

Generic Signature Format for SIEM Systems

sigred_rce_poc

sillytavern

LLM Frontend for Power Users.

simpleremoter

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。项目代码仅限于学习和交流用途。

sleepycrypt

A shellcode function to encrypt a running process image when sleeping.

slides

smartdns

A local DNS server to obtain the fastest website IP for the best Internet experience, support DoT, DoH. 一个本地DNS服务器，获取最快的网站IP，获得最佳上网体验，支持DoH，DoT。

spoofing-gate

(Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll

spoolfool

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

spooltrigger

Weaponizing for privileged file writes bugs with PrintNotify Service

spyder

Official repository for Spyder - The Scientific Python Development Environment

ss-rule-snippet

搜集、整理、维护 Surge / Quantumult (X) / Shadowrocket / Surfboard / clash (Premium) 实用规则。

subconverter

Utility to convert between various subscription format

superdllhijack

SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

syscallhook

System call hook for Windows 10 20H1

sysmoneop

CVE-2022-41120 PoC

systemexplorer

Windows System Explorer

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

tangledwinexec

PoCs and tools for investigation of Windows process execution techniques

tartarusgate

TartarusGate, Bypassing EDRs

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

the-book-of-modern-cpp

The Book of Modern C++

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .