e4rl Goto Github PK

0xpat.github.io

0xpat blog

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

arpuninstallstringlauncherbypassuac

Use ARP UninstallString Launcher to bypass uac

bdvl

bdvl

blacklotus

BlackLotus UEFI Windows Bootkit

edrception

A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

exploits

Pwn stuff.

gotron-sdk

Tron SDK for golang / CLI tool with keystore manager

hvnc

HVNC Client & Server | Coded in C++ (Fixed Tinynuke)

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kcp-go

A Crypto-Secure, Production-Grade Reliable-UDP Library for golang with FEC

kdu

Kernel Driver Utility

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

malware

Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from: http://www.malwaretech.com

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps. 👻🐚

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

reptile

LKM Linux rootkit

rules

shellghost

A memory-based evasion technique which makes shellcode invisible from process start to end.

skrull

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

tinynuke

zeus-style banking trojan

vncdll

Stand-alone VNC server compiled as a Reflective DLL

windows-dll-hijacking

Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.