ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
Loading Remote AES Encrypted PE in memory , Decrypted it and run it
Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.
A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.
Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.
UAC bypass by abusing RPC and debug objects.
mXtract - Memory Extractor & Analyzer
Venom is a library that meant to perform evasive communication using stolen browser socket
Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
A user-mode code and its rootkit that will Kill EDR Processes permanently by leveraging the power of Process Creation Blocking Kernel Callback Routine registering and ZwTerminateProcess.
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
DNS-Persist is a post-exploitation agent which uses DNS for command and control.
RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
To associate your repository with the redteam topic, visit your repo's landing page and select "manage topics."