sinw0lf Goto Github PK

sandboxppl

Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.

scoutsuite

Multi-Cloud Security Auditing Tool

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

shelloverreversessh

A little implant which SSH's back with a shell

skrull

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

sliver

Adversary Emulation Framework

teamsimplant

tymspecial

SysWhispers integrated shellcode loader w/ ETW patching, anti-sandboxing, & spoofed code signing certificates

uncover

Quickly discover exposed hosts on the internet using multiple search engine.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

venom

venom - shellcode generator/compiler/handler (metasploit)

viper

Intranet pentesting tool with webui 开源图形化内网渗透工具

virustotalc2

Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one

vortex

VPN Overall Reconnaissance, Testing, Enumeration and eXploitation Toolkit

weaponizekali.sh

Automate installation of extra pentest tools on Kali Linux

weird_proxies

Reverse proxies cheatsheet

windowsmdmlpe