ashupup Goto Github PK

loaderfly

助力每一位RT队员，快速生成免杀木马

log4j2

《HackLog4j-永恒之恶龙》致敬全宇宙最无敌的Java日志库！Tribute to the most invincible Java logging library in the universe!

log4j2-cve-2021-44228

Remote Code Injection In Log4j

macos-all

macos all, 关于macos的实用内容 不仅是macos...还有各种常用的渗透、命令行技巧

manualrsrcdatafetching

Get your data from the resource section manually, with no need for windows apis

mhydeath

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

msmap

Msmap is a Memory WebShell Generator.

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

mutants_sessions_self-deletion

Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

nacosrce

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

no_x_memory_shellcodeloader

无可执行权限加载 ShellCode (点点 Star，非常感谢!)

note

记录自己写的工具和学习笔记

noterce

一种另辟蹊径的免杀执行系统命令的木马

notes

Security & Development

octopii

An AI-powered Personal Identifiable Information (PII) scanner.

offensive-c-sharp

offensivecsharp

Offensive C# Tooling

parsepe

命令行PE解析

passwordcollection

常见密码收集

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pe-infector

Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)

pe_to_shellcode

Converts PE into a shellcode

pengcode

EXE转ShellCode工具

pentest_note

渗透测试常规操作记录

pezor

Open-Source Shellcode & PE Packer

phpwebshell

一些自己无聊写的免杀php木马，404页面伪装大马-Apache+Nginx版本，phpinfo伪装马，404页面小马，404页面一句话，phpinfo一句话，phpinfo小马

pigadvulnscanner

检测域内常见一把梭漏洞，包括：NoPac、ZeroLogon、CVE-2022-26923、PrintNightMare

pigscheduletask

添加计划任务方法集合

post-hub

内网横向