d0gx Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

antivirus_r3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

awesome-browser-exploit

awesome list of browser exploitation tutorials

awesome-windows-kernel-security-development

windows kernel security development

browser-exploitation

A collection of curated resources and CVEs I use for research.

chaos-me-javascript-v8

零基础入门V8引擎漏洞挖掘

clrvoyance

Managed assembly shellcode generation

doge-clrload

load assembly executable file in memory

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

edk2-archive

Archive of old branches for EDK II

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

exploit-development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

hellsgate

Original C Implementation of the Hell's Gate VX Technique

hwsyscalls

HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

impacket

Impacket is a collection of Python classes for working with network protocols.

jackit

JackIt - Exploit Code for Mousejack

leakedhandlesfinder

Leaked Windows processes handles identification tool

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

php_include_to_shell_char_dict

process-hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rpcsdemo

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

toefl-1

托福王炸福利包

uacme

Defeating Windows User Account Control

urlfinder

类似JSFinder的golang实现，一款用于快速提取检测页面中JS与URL的工具，更快更全更舒服