一键生成免杀木马的 shellcode 免杀框架

This script is designed to demonstrate the exploitation of vulnerabilities in PAN-OS firewalls. It sends a specially crafted payload to the firewall's API endpoint to execute arbitrary commands.

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

LILO based Pulse Secure appliance disk image decryptor

A utility to dump all Protobuf file descriptors from a given binary as *.proto files

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find s…

【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安

实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted request…

This repository presents a proof-of-concept of CVE-2023-7028

CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as Administrator.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

This project is aimed at freely providing technical guides on various hacking topics: Active Directory services, web services, servers, intelligence gathering, physical intrusion, phishing, mobile …

C++ self-Injecting dropper based on various EDR evasion techniques.

一键免杀冰蝎、哥斯拉等webshel​​l的php、jsp木马文件

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

PingRAT secretly passes C2 traffic through firewalls using ICMP payloads.

助力每一位RT队员，快速生成免杀木马

用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等

使用 Godzilla 一键注入 Suo5 内存马

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

A hacker-like, highly-customizable theme for note-keeping, personal-website or CV.

It can be either a JNDIExploit or a ysoserial.

Deployment template for docker target machine in ctf for CTFd and other platforms that support dynamic flags

一个利用浏览器当代理的demo项目,让所有访问者的浏览器成为自己的代理池，所到之处皆为代理节点.

x64 binary obfuscator

Semgrep rules registry

CVE-2023-21707 EXP