Display and control your Android device

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Defeating Windows User Account Control

Simple (relatively) things allowing you to dig a bit deeper than usual.

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

generate CobaltStrike's cross-platform payload

Global Proxy for Android

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

The swiss army knife of LSASS dumping

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

Dump cookies and credentials directly from Chrome/Edge process memory

HVNC for Cobalt Strike

Credentials Dumper for Linux using eBPF

AV/EDR Evasion

助力每一位RT队员，快速生成免杀木马

xfrpc 是一个轻量级的 FRP 客户端，完美兼容 frps，采用 C 语言实现，专为 OpenWRT 和物联网等资源受限系统优化设计。它针对 ROM 和 RAM 空间有限的设备，提供高效的内网穿透解决方案。xfrpc 集成了xDPI（深度包检测）功能，增强了安全性，有效防止内网穿透中因恶意嗅探导致的安全威胁，确保数据传输和网络访问的可靠保护。技术交流QQ群 331230369

TCP Port Redirection Utility

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

内网域渗透小工具

A BOF that runs unmanaged PEs inline

免杀，bypassav，免杀框架，nim，shellcode，使用nim编写的shellcode加载器

免杀远控木马源码整理开源(银狐 winos 大灰狼 gh0st) Rat

A socksv5 proxy tool Written by CLang. 一款纯C实现的轻量内网穿透工具，支持正向，反向socks5代理隧道的搭建，支持跨平台使用。

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

A Windows potato to privesc

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

RunPE implementation with multiple evasive techniques

一个轻量级的 socks5 代理, 带简单加密传输功能, 可穿透 GFW

基于Tinynuke修复得到的HVNC

Self-cleaning in-memory PICO loader for Crystal Palace. Automatically erases traces and operates entirely in memory for stealthy payload execution.