ellen2015 Goto Github PK

snort3

Snort++

sockfuzzer

softethervpn

Cross-platform multi-protocol VPN software. Pull requests are welcome. The stable version is available at https://github.com/SoftEtherVPN/SoftEtherVPN_Stable.

source-and-fuzzing

一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..

sparta

A virtualization-based endpoint security solution for Windows

stackwalker

Walking the callstack in windows applications

static-program-analysis-book

Getting started with static program analysis. 静态程序分析入门教程。

stealthgameudemy

C++ Stealth Game in Unreal Engine (Udemy Project)

stlkrn

C++ STL in the Windows Kernel with C++ Exception Support

stopdefender

Stop Windows Defender programmatically

strace

A DTrace on Windows Reimplementation

sunlogin_rce

向日葵 RCE

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

sw2-secinject

Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF

swh-injector

An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

syscalltables

Windows NT x64 Syscall tables

sysmap

x64 manual mapper using inline syscalls

sysmon_reverse

sysmonquiet

RDLL for Cobalt Strike beacon to silence sysmon process

sysmonsimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

sysppidspoofing

give me sedebugprivilege I will become a SYSTEM by spoofing a parent process runned as AUTHORITY NT\system

system_trace_tool

内核驱动加载/卸载痕迹清理,努力绕过反作弊吧 PiDDBCacheTable and MmLastUnloadedDriver

systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

syswhispers2

AV/EDR evasion via direct system calls.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

t.d.p

Using Thread Description To Hide Shellcode

t.d.p.

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.