Glue - Robust Go and Javascript Socket Library (Alternative to Socket.io)

An in-memory string-interface{} map with various expiration options for golang

automatic enumeration and maintenance of Suricata monitoring interfaces

一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接

带有用户管理和后台管理系统的商业版 ChatGPT和Midjourney程序

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

(shunf4 mod: acting as a SOCKS5 proxy which can optionally MitM TLS) Intercepting TCP proxy to modify raw TCP streams using modules on incoming or outgoing traffic

一款支持高度自定义的 Java 内存马生成工具

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

LPE exploit for CVE-2023-21768

A windows token impersonation tool written in Rust. (library) 🦀

Microsoft signed ActiveDirectory PowerShell module

::ZheTian / 强大的免杀生成工具，Bypass All.

Msmap is a Memory WebShell Generator.

Abusing Reddit API to host the C2 traffic, since most of the blue-team members use Reddit, it might be a great way to make the traffic look legit.

Splatoon/斯普拉遁 自动绘图工具

Modern Shadowsocks in Go

Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.

📷 BrowserBox - Remote isolated browser API for security, automation visibility and interactivity. Run on our cloud, or bring your own. Full scope double reverse web proxy with multi-tab, mobile-rea…

Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

The New (auto rotate) Proxy [Finder | Checker | Server]. HTTP(S) & SOCKS 🎭

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

dump lsass

OVAL parser written in go.

A terminal based graphical activity monitor inspired by gtop and vtop

Source Code Management Attack Toolkit

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

能过卡巴、核晶、defender等杀软的dump lsass进程工具

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点