jjsdub556 Goto Github PK

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pe-loader-sample

Proof of concept implementation of in-memory PE Loader based on ReflectiveDLLInjection Technique

pecrypter

Code that allows running another windows PE in the same address space as the host process.

pentesthardware

Kinda useful notes collated together publicly

poisonhandler

lateral movement techniques that can be used during red team exercises

powermemory

Exploit the credentials present in files and memory

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

ppldump

Dump the memory of a PPL with a userland exploit

ppr

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

proxybroker

Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS :performing_arts:

psamsi

PSAmsi is a tool for auditing and defeating AMSI signatures.

psattackbuildtool

A tool for building PS>Attack, an offensive PowerShell console that makes it easy for pentesters to use PowerShell.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pygpoabuse

Partial python implementation of SharpGPOAbuse

pypykatz

Mimikatz implementation in pure Python

rdcmantest

reconscan

Network reconnaissance and vulnerability assessment tools.

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

reverse-shell-poc

Custom C++ Reverse Shell POC | No AV Bypass Techniques or Tweaks Done | AVT Detection ratio: 2/61

revshellgen

Reverse shell generator

rpivot

socks4 reverse proxy for penetration testing

rtfm

A database of common, interesting or useful commands, in one handy referable form

screendump

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

shellcode_loader

ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。

shellpop

Pop shells like a master.

sigthief

Stealing Signatures and Making One Invalid Signature at a Time

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR