a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab

GhostLoader - AppDomainManager - Injection - 攻壳机动队

Execute Mimikatz with different technique

A Proof-of-Concept implementation for Proxy Object Obfuscation in .NET

Remote administration tool with native client

MappingInjection via csharp

Command line & PPID spoofing

bypassuac、administrator->system提权的免杀小工具，可过Defender、360、卡巴等

Change hash for a signed pe

Windows Service with the implementation of the Process hollowing technique to run shellcode

Rat forked from https://github.com/quasar/QuasarRAT. New functionalities added.

A Simple ShellcodeLoader

Injecting shellcode to VBA and JS format

Exploit for EfsPotato(MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability).

Escalate Service Account To LocalSystem via Kerberos

Terminate AV/EDR Processes using kernel driver

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

Proof-of-Concept for CVE-2023-38146 ("ThemeBleed")

A PoC for achieving persistence via push notifications on Windows

Webshell Manager

reflectively load and execute PEs locally and remotely bypassing EDR hooks

SharpLDAP is a tool written in C# that aims to do enumeration via LDAP queries