AI一键免杀WebShell，包含金刚狼、哥斯拉、冰蝎、菜刀等

ysoserial修改版，着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。

此项目为su18大佬的仓库镜像，如有问题可发issuse删库

一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

Post-exploitation and evasion research toolkit for Linux.

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping,…

Find secrets with Gitleaks 🔑

A repository of sysmon configuration modules

LazyOwn RedTeam/APT Framework is the first RedTeam Framework with an AI-powered C&C, featuring rootkits to conceal campaigns, undetectable malleable implants compatible with Windows/Linux/Mac OSX, …

Linux Bontnet written in pure C not based on Mirai. DDoS, Bruteforcing, Packet Sniffer, Killer, Persist modules included. Tor + CLI + TUI CNC.

An awesome collection of articles, papers, conferences, guides, and tools relating to deception in cybersecurity.

The S-500 G2 Rat Hvnc stands as a pinnacle of remote administration tools, complemented by its advanced Hvnc capabilities.

This project contains an open source RAT (Remote Access Trojan).

Hidden VNC constitutes an ingenious stratagem harnessed by the most adept connoisseurs of technology. This method, by far, presents an exhilarating modality to govern the operation

Smart screen bypass software advanced HVNV Screenconnect alternative lifetime cracked licence with EV certificate no need to crypt exe file also bypass EDR mostly welcome for free demo

A tool to dump the login password from the current linux user

蓝队应急工具

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

Blind&Invisible Watermark ，图片盲水印，提取水印无须原图！

Persistent Reverse Shell with Kernel Thread Monitoring and Uninterruptible Sleep

This is the list of all rootkits found so far on github and other sites.

ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.

All android banking botnets is here & injections

How to hide a hook -- A hypervisor for rootkits. Phrack 69

A C library for creating and using TCP/IP packets with raw network sockets

Fileless attack with persistence

Executable that mutates its own code

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI

Tool to evade Antivirus With Different Techniques