xkroot Goto Github PK

outlookparasite

Outlook persistence using VSTO add-ins

pangolin

patriot

pe

A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

periscope

Fully Integrated Adversarial Operations Toolkit (C2, stagers, agents, ephemeral infrastructure, phishing engine, and automation)

pezor

Open-Source Shellcode & PE Packer

pe_to_shellcode

Converts PE into a shellcode

pigscheduletask

添加计划任务方法集合

pillager

A tool for browser recovery

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pinduoduo_backdoor_demo

pinduoduo backdoor

pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

poc-s

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞， 对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

poolpartybof

A beacon object file implementation of PoolParty Process Injection Technique.

poweroneliner

Powershell shellcode one-liner. Powershell免杀一句话上线器便捷生成

powershell-obfuscation

powershell免杀混淆器，简单有效，VT全过。A simple and effective powershell obfuscaiton tool bypass Anti-Virus

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

presenthookdetection

proxy-dll-loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

ptrace_do

A ptrace library for easy syscall injection in Linux.

python-anti-debug

Anti-Debugger + SSL-Pinning, to defeat fiddlers (distinguish debug-proxied connection and secure ur programs)

quasar

Remote Administration Tool for Windows

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

rat-hodin-v2.9

Remote Administration Tool for Linux

rat-njrat-0.7d-modded-source-code

fork from https://github.com/AliBawazeEer/RAT-NjRat-0.7d-modded-source-code

reactos

A free Windows-compatible Operating System

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

realproxy

Fake proxy tool