nothingcw Goto Github PK

security_w1k1

大手子们要是使用过后，能给菜鸡弟弟在Issues反馈个用后体验，那就真的是万分感激了。你一赞，我一赞，年薪百万不停转。

securitytips

shadowproxy

sharp-suite

My musings with C#

sharpbeacon

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpcompile

SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approach than manually compiling an .NET assembly and loading it into Cobalt Strike. The project aims to make it easier to move away from adhoc PowerShell execution instead creating a temporary assembly and executing using beacon's 'execute-assembly' in seconds.

sharpdecryptpwd

对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。

sharpdllproxy

Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading

sharplink

Create file system symbolic links from low privileged user accounts within PowerShell

sharpmapexec

sharpmove

.NET Project for performing Authenticated Remote Execution

sharpnetcheck

在内网渗透过程中，对可以出网的机器是十分渴望的。在收集大量弱口令的情况下，一个一个去测试能不能出网太麻烦了。所以就有了这个工具，可配合如wmiexec、psexec等横向工具进行批量检测，该工具可以在dnslog中回显内网ip地址和计算机名，可实现内网中的快速定位可出网机器。

sharppack

A collection of C# tools for various purposes (kerberoasting, tickets, mimikatz, privesc, domain enumeration and more)

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

sharpshares

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

sharpsqldump

内网渗透中快速获取数据库所有库名，表名，列名。具体判断后再去翻数据，节省时间。适用于mysql，mssql。

sharpstay

.NET project for installing Persistence

sharpstrike

A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

sharpsystemtriggers

Collection of remote authentication triggers in C#

sharptoolsaggressor

内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~

sharpwmi

sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。

sharpxdecrypt

Xshell全版本密码解密工具

sheepwall

Sniff plaintext account/password/cookie on router

shellcodecompiler

Shellcode Compiler

shellcodefluctuation

An in-memory evasion technique fluctuating shellcode memory protection between RW & RX and encrypting/decrypting contents

shellcodeloader

shellcodeloader

shiro-721

Shiro-721 RCE Via RememberMe Padding Oracle Attack

simple_https_server

It's a quick HTTPS server.