gpiiiiii Goto Github PK

apt-attack-simulation

A APT Attack Simulation for APT 29 & Lockbit

atexec-pro

Fileless atexec, no more need for port 445

av_edr_epp_notes

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

cs-autopostchain

基于 OPSEC 的 CobaltStrike 后渗透自动化链

java-memshell-generator

一款支持高度自定义的 Java 内存马生成工具

jlaive

Antivirus evasion tool (crypter) that converts executables into undetectable batch files.

kerbeus-bof

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

learning-edr-and-edr_evasion

I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

magiskonwsa

Integrate Magisk root and Google Apps (OpenGApps) into WSA (Windows Subsystem for Android)

magiskonwsalocal

new_in_swor

bypassAll静态引擎，如绕过QVM，绕过VT所有静态引擎

npcap

Nmap Project's Windows packet capture and transmission library

oxgenpdb

a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.

powershell-obfuscation

powershell免杀混淆器，简单有效。A simple and effective powershell obfuscaiton tool bypass Anti-Virus

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

rop_rocket

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

rtcore64_vulnerability

Use RTCore64 to map your driver on windows 11.

searchavailableexe

寻找可利用的白文件

specialshellcode

将shellcode转换特殊的数据类型，用于过静态免杀

stink

Stealer in just a few lines with sending to Server / Telegram / Discord. No dependencies, only built-in libraries.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

test

test

vdr

Vulnerable driver research tool, result and exploit PoCs

vmprotect

VMProtect Leaked Source Code

vmprotect-3.5.1

xll-dropper-

XLL DROPPER | Learn to create Native xll Dropper