Stars
Ridter / Hikari
Forked from stonedio/ArkariYet another llvm based obfuscator based on goron.
Identifying and Disrupting Crypto-Ransomware (and Destructive Malware) using handle heurustics
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
WELA (Windows Event Log Analyzer): The Swiss Army knife for Windows Event Logs! ゑ羅（ウェラ）
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
Simulate the behavior of AV/EDR for malware development training.
TeamServer and Client of Exploration Command and Control Framework
A tool to extract a KeePass master password from memory
Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encry…
Some scripts to abuse kerberos using Powershell
Print Spooler Named Pipe Impersonation for Cobalt Strike
Grab unsaved Notepad contents with a Beacon Object File
EndpointSearch 是一个探测云服务端点的扫描器。Endpoint Search is a sophisticated reconnaissance utility designed to discreetly identify and enumerate endpoints within cloud services.
Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms
永久免杀加载器移步另一个项目https://github.com/snnxyss/new_in_swor 一个简单内网渗透工具免杀 目前免杀fscan,mimikatz,frp,elevationstation,bypassuac, 一键killAV 。请使用In-Swor(x64版本)360报毒qvm20请更换exe图标资源。