ttsite,github

gdrvloader

Unsigned driver loader using CVE-2018-19320

getsystem

This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of almost any SYSTEM process.

godmode

Tool for playing with and manipulating Windows Tokens.

godpotato_clr

A Custom CLR Assembly for MSSQL of the popular tool GodPotato

goon，是一款基于golang开发的扫描及爆破工具功能如下：扫描模式支持ip探活(ipscan)、端口扫描(portscan)、web扫描(webscan -web y)、title扫描(titlescan)、dirscan、备份文件扫描(backscan)、插件扫描(pluginscan)、自定义扫描(autoscan)。爆破模式支持ftp爆破、mssq爆破、mysql爆破、postgres爆破、redis爆破、ssh爆破。

gost

GO Simple Tunnel - a simple tunnel written in golang

graftcp

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

greenhub-desktop

Greenhub的桌面版，与Greenhub插件一致

gungnir

一款操作互不干扰的远程桌面工具

handly

Abuse leaked token handles.

hidden

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

hiddendesktopviewer

This tool reveals hidden desktops and investigate processes/threads utilizing hidden desktops

hiddenvm

HiddenVM — Use any desktop OS without leaving a trace.

hideport

Hide Port In Windows

hideprocesshook

Simple NtQuerySystemInformation hook for your hacking apps.

hideprocesshook-1

DLL that hooks the NtQuerySystemInformation API and hides a process name

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).