nopadd Goto Github PK
Type: User
Company: Red
Type: User
Company: Red
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
This repository contains a tool that can encrypt all type of files and give the encrypted output in the form of an encrypted shellcode. Process of encrypting shellcode is very important for injection processes to bypass signature based detection by the security controls.
AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.
Overwrite a process's recovery callback and invoke a crash to execute
滴水逆向初、中级学习笔记,不定时更新,自用仓库,不喜勿喷;感谢滴水,有如此完整体系的学习视频,白嫖党嫖了一波...感谢滴水的老师,听课受益匪浅。
PE学习小工具,它的作用就是将32位的PE文件的按内存对齐,然后合并所有节,接着新增一个节存放Shellcode,将程序入口位置修改到Shellcode的位置。
Java code inspector for web vulnerability scan, building method call chains and emulate stack frame for analysis (JavaWeb漏洞审计工具,构建方法调用链并模拟栈帧进行分析)
容器安全漏洞的分析与复现
创建服务持久化
CVE-2021-22205& GitLab CE/EE RCE
Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL
一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。
fastjson 被动扫描、不出网payload生成
frp修改版,增加socks、pf命令,便捷启用socks5代理、端口转发,且去除流量特征,增加loadini命令,支持命令行参数导入base64编码的配置文件
一款适用于红蓝对抗中的仿真钓鱼系统
golang uuid-shellcode加载器,分离执行,可直接把shellcode写入程序。
《深入理解Java代码审计》
Website FingerPrint Recognition
基于SpringBoot编写的常见Web漏洞安全开发学习平台
RASP测试靶场
一款用于 JNDI注入 利用的工具,大量参考/引用了 Rogue JNDI 项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。(from https://github.com/feihong-cs/JNDIExploit)
just4fun
Katacoda Scenarios
lbb是一个企业信息查询工具,可以帮助企业查询自身对外公开的应用、新媒体,网站等。
一款linux 内网渗透辅助工具
《Linux提权工具与方法论》
netspy是一款快速探测内网可达网段工具
CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.