w1nds Goto Github PK

aceldr

Cobalt Strike UDRL for memory scanner evasion.

acpi_sandbox_detect

通过ACPI检测沙箱

aheadlib64

x64 dll hijacking tool(like AheadLib)

aiassist

GameAssist是一个AI游戏助手，结合OpenCv、OpenCvSharp4、ssd_mobilenet_v3等技术，对游戏对象进行识别，支持自动瞄准/自动开枪等功能，提升玩家的游戏体验

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

amsi-killer

Lifetime AMSI bypass

andserver

:cherries: Web server and web framework of Android platform.

anti-rootkit

anycall

x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

arp-spoofing-go

基于go语言实现的ARP欺骗工具，支持局域网内主机扫描，ARP投毒、中间人攻击、敏感信息嗅探，HTTP报文嗅探

atattack

敌后侦察

autochk-rootkit

Reverse engineered source code of the autochk rootkit

autogetredenv

微信自动抢红包动态库

banshee

Experimental Windows x64 Kernel Rootkit.

beacon_source

not a reverse-engineered version of the Cobalt Strike Beacon

beescan-scan

网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language, Distributed, Scanning, Asset Detection, Asset Mapping, Red Team, SRC

beescan-web

网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language, Distributed, Scanning, Asset Detection, Asset Mapping, Red Team, SRC

blackbone

Windows memory hacking library

blog_material

ch55x_usb_proj

Experimental repository.

cidlldemo

Use ci.dll API for validating Authenticode signature of files

createprocess

A small PoC that creates processes in Windows

cs-remote-ops-bof

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

cve-2022-3699

Lenovo Diagnostics Driver EoP - Arbitrary R/W

darkloadlibrary

LoadLibrary for offensive operations

dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

dismember

:knife: Scan memory for secrets and more. Maybe eventually a full /proc toolkit.

dispg

dll2shellcode

dll转shellcode工具