xkroot Goto Github PK

vectorkernel

PoCs for Kernelmode rootkit techniques research.

venomrat-sourcecode

This version venom rat 6.0.3 with Source Code

villain

Villain is a C2 framework that can handle multiple TCP socket & HoaxShell-based reverse shells, enhance their functionality with additional features (commands, utilities etc) and share them among connected sibling servers (Villain instances running on different machines).

virustotalc2

Abusing VirusTotal API to host our C2 traffic, usefull for bypassing blocking firewall rules if VirusTotal is in the target white list , and in case you don't have C2 infrastructure , now you have a free one

vmprotect-3.5.1

vmwarethrough

voidmap

Using CVE-2021-40449 to manual map kernel mode driver

vs-shellcode

Shellcode template for visual studio

vxrat

Remote administration tool with native client

vxscan

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

webshell_bypass

webshell动态免杀工具由php语言开发的带ui的免杀工具，使用者可上传由冰蝎或者天蝎生成的webshell，动态自动生成免杀webshell。目前只支持php、jsp，其它语言，各位使用者可自己去编写脚本实现。

wfh

win64-rovnix-vbr-bootkit

Win64/Rovnix - Volume Boot Record Bootkit

winark

Windows Anti-Rootkit Tool

winsocky

Winsocket for Cobalt Strike.

wizard-wallet-stealer

🦊🧡 Easy To Use And Source Stealer 12 Seed Phrase Metamask & TrustWallet That's Super Effective , Bypass Antivirus

wmiexec-pro

New generation of wmiexec.py

wodat

Windows Oracle Database Attack Toolkit

yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

yawf

Web 漏洞检测工具

youmaypasser

You shall pass

ysoserial

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

ysoserial-1

此项目为su18大佬的仓库镜像，如有问题可发issuse删库

zhouyu

（周瑜）Java - SpringBoot 持久化 WebShell 学习demo（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）