hello-xbugs Goto Github PK

entropy

Binary file entropy visualizer written in Python

erebus

CobaltStrike后渗透测试插件

evil-winrm

The ultimate WinRM shell for hacking/pentesting

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

evildll

Malicious DLL (Reverse Shell) generator for DLL Hijacking

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

eviloffice

Inject Macro and DDE code into Excel and Word documents (reverse shell)

evilosx

An evil RAT (Remote Administration Tool) for macOS / OS X.

evilpdf

Embedding executable files in PDF Documents

evtx-attack-samples

Windows Events Samples

excel4-dcom

PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)

exe_to_dll

Converts a EXE into DLL

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

expl-bin

some of my modified exploits

exploit

Exploits and advisories

exploitation-course

Offensive Software Exploitation Course

exploitingbooks

Reversing & Exploiting Books Collection

exploits

Pwn stuff.

exploits-1

fakeimageexploiter

Use a Fake image.jpg (hide known file extensions) to exploit targets

fakelogonscreen

Fake Windows logon screen to steal passwords

falconstrike

A stealthy, targeted Windows Loader for delivering second-stage payloads(shellcode) to the host machine undetected

fastjson_rce_tool

fastjson漏洞检测辅助工具， JNDI服务利用工具 RMI/LDAP，支持部分场景回显，内存shell等辅助利用神器

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

femida

Automated blind-xss search for Burp Suite

ffuf

Fast web fuzzer written in Go

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

filterpcap

Fast pcap voip filters