sbkrepof Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

amsitrigger

The Hunt for Malicious Strings

behinderclientsource

冰蝎客户端源码-3.0-BETA11.t00ls

cnseay

Seay源代码审计系统

collection-document

Collection of quality safety articles. Awesome articles.

creds

Some usefull Scripts and Executables for Pentest & Forensics

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847

de4dot

.NET deobfuscator and unpacker.

edrhunt

Scan installed EDRs and AVs on Windows

fakelogonscreen

Fake Windows logon screen to steal passwords

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

goscan

GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jndiexploit-2

A malicious LDAP server for JNDI injection attacks

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

log4j2-rce-scanner

BurpSuite Extension: Log4j2 RCE Scanner

nopowershell

PowerShell rebuilt in C# for Red Teaming purposes

nucleitp

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

offensive_tools

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

process_overwriting

Yet another variant of Process Hollowing

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharp-suite

Also known by Microsoft as Knifecoat :hot_pepper:

sharpbypassuac

C# tool for UAC bypasses

sharplink

Create file system symbolic links from low privileged user accounts within PowerShell

sharpnamedpipepth

Pass the Hash to a named pipe for token Impersonation

sharpview

C# implementation of harmj0y's PowerView