p0x Goto Github PK

aes-crypter-win32

AES Crypter for Society of Engineers Remote Access Trojan (RAT) Project Lead: Derek Ta Security Programmer: Taegan Warren

agafi

A gadget finder and a ROP-Chainer tool for x86 platforms

aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

awesome-windows-kernel-security-development

blackhat2012

Blackhat 2012 Sample Codes

bofs

Collection of Beacon Object Files

bypassav-dynimp

Bypass antivirus with dynamic import. Hide the api(s) used.

c-browser-password-cracker

C++ Firefox & Google Chrome Cracker Source Code

cobaltstr4.4

Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as "adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors". Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system.

dns-persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

dnschan

DNS-based trojan (client and server)

entropy

reducing the entropy of your payload

galvatron

Powershell fork of Monohard by Carlos Ganoza P. This botnet/backdoor was designed to egress over unecrypted web using very little, but effective obfuscation. Egress over ICMP and DNS are planned as features. Lastly, the server code is designed to setup the C2 on a LAMP-esque server. The default creds are admin/admin.

hacksysextremevulnerabledriver

HackSys Extreme Vulnerable Windows Driver

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

hideprocess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

infosec_reference

An Information Security Reference That Doesn't Suck

injectcode

Remote thread injected DLL libraries, support for windows 32-bit and 64-bit platforms

kernel-exploits

layer2-pivoting-client

A simple client to demonstrate Layer-2 pivoting. Compatible with the simpletun.c server written by Davide Brini.

memdllloader_blackbone

Windows memory hacking library

metame

metame is a metamorphic code engine for arbitrary executables

microbackdoor

Small and convenient C2 tool for Windows targets

mosca

Manual search tool to find bugs like a grep unix command - Beta

openxmolar

A MS OpenXML Format Fuzzing Framework

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentestscripts

Scripts that are useful for me on pen tests

pezor

Open-Source PE Packer

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

post-exploitation

Post Exploitation Collection