ongyuann Goto Github PK
Type: User
Type: User
DLL hijacking with exported functions
365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.
A PowerShell script that automates the security assessment of Microsoft Office 365 environments.
Abuse Azure API permissions for red teaming
Contains a collection of Bash scripts designed for comprehensive security audits and network mapping of Active Directory (AD) environments. The scripts automate various tasks including LDAP querying, Kerberos ticket analysis, SMB enumeration, and exploitation of known vulnerabilities like Zerologon and PetitPotam.
ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.
Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities
A protective and Low Level Shellcode Loader that defeats modern EDR systems.
In-depth Attack Surface Mapping and Asset Discovery
C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
Simple exploit POC for https://promon.co/security-news/strandhogg/ which can steal username and password from targeted android package process
Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite.
reads apache logs and returns some cool output (actually just txt and csv)
Android Reverse-Engineering Workbench for VS Code
Various public documents, whitepapers and articles about APT campaigns
Arcane - A secure remote desktop application for Windows with the particularity of having a server entirely written in PowerShell and a cross-platform client (Python/QT6).
ASM scripts useful for basic operations from the user side.
Heavily obfuscated ASP web shell generation tool.
Open-Source Remote Administration Tool For Windows C# (RAT)
Small and highly portable detection tests based on MITRE's ATT&CK.
Attack Detection
Evasive Golang Loader
Reverse engineered source code of the autochk rootkit
Utility to craft HTML smuggled files for Red Team engagements
List of Awesome Advanced Windows Exploitation References
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.