重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

Druid 密文解密工具

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

x64 binary obfuscator

Download media files from a telegram conversation/chat/channel up to 2GiB per file

Open source C2 server created for stealth red team operations

A Command and Control (C2)

A Golang library that transforms any net.Conn or io.ReadWriter stream to an encrypted and/or authenticated stream

Lifetime AMSI bypass

Reflective PE packer.

BlackLotus UEFI Windows Bootkit

SGN — polymorphic binary encoder

A C# Command & Control framework

Open source C2 server created for stealth red team operations

📦 Make security testing of K8s, Docker, and Containerd easier.

强化fscan的漏扫POC库

2022 护网行动 POC 整理

六大云存储，泄露利用检测工具

有关 dll 转发的 golang windows 恶意代码示例

log4jScanner provides the ability to scan internal subnets for vulnerable log4j web services

oracle 数据库命令执行

A utility to convert your AWS CLI credentials into AWS console access.

"Socialx" is a Social Engineering And Remote Access Trojan Tool. You can generate fud backdoor and you can embed any file you want inside of the exe file.

A wordlist analyzer framework written in Python and distributed on PyPi.

Find specific users in active directory via their username and logon IP address

A high performance offensive security tool for reconnaissance and vulnerability scanning

A New Microsoft Windows Remote Administrator Tool [RAT] with Python by Sir.4m1R.

rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments

Wrapper Code for Impacket NTLMRelayX