yougar0 Goto Github PK

ssl

StenographyShellcodeLoader

ssocks

sSocks fork for windows support; original: https://sourceforge.net/projects/ssocks/

staykit

Cobalt Strike kit for Persistence

steganography

Steganography - hide data inside an image.

stinkyloader

It stinks

stlkrn

C++ STL in the Windows Kernel with C++ Exception Support

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

sunlogin_rce_

某日葵远程rce

suspended-thread-injection

Another meterpreter injection technique using C# that attempts to bypass Defender

swagger-exp

A Swagger API Exploit

sylas

数据库综合利用工具

syscallpack

BOF and Shellcode for full DLL unhooking using dynamic syscalls

sysmonsimulator

Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

taowu-cobalt-strike

taskschedulermisc

Misc TaskScheduler Plays

teamsimplant

tetanus

Mythic C2 agent targeting Linux and Windows hosts written in Rust

threadcontinue

Reflective DLL injection using SetThreadContext() and NtContinue()

tiny-aes-c

Small portable AES128/192/256 in C

tinynuke

Botnet system from deep-web Russians forums. Tiny Nuke!

titanldr

Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

trustedpath-uacbypass-bof

Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.

tymspecial

SysWhispers integrated shellcode loader w/ ETW patching, anti-sandboxing, & spoofed code signing certificates

uacme

Defeating Windows User Account Control

unexpected_information

Unexpected information 是用于标记请求包中的一些敏感信息、JS接口和一些特殊字段的BurpSuite 插件。

unhookingpoc

A small commented POC for removing API hooks placed by AV/EDR.

vajra

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

vmpattack

A VMP to VTIL lifter.