zha0 Goto Github PK

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

bypass-beacon-config-scan

Bypass cobaltstrike beacon config scan

bypass_vmp_vm_detect

bypass vmp virtual machine detect

bypassanti-virus

免杀姿势学习、记录、复现。

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

bypassav

破产版免杀

bypassav-1

This map lists the essential techniques to bypass anti-virus and EDR

bypasscredguard

Credential Guard Bypass Via Patching Wdigest Memory

bypassuseradd

通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化

bytedance-unionad

c-toxcore

The future of online communications.

c2intelfeeds

Automatically created C2 Feeds

caa

CaA - BurpSuite Collector and Analyzer

caldera

Automated Adversary Emulation Platform

callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

callidus

callmon

CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers

callobfuscator

Obfuscate specific windows apis with different apis

callstackspoofer

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

camlboy

A Game Boy emulator that runs in your browser written in OCaml 🐫 🎮

canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

candypotato

Pure C++, weaponized, fully automated implementation of RottenPotatoNG

capa

The FLARE team's open-source tool to identify capabilities in executable files.

carbuncle

Tool for interacting with outlook interop during red team engagements

caronte

A tool to analyze the network flow during attack/defence Capture the Flag competitions

categorized-adversary-ttps

Merge of two major cyber adversary datasets, MITRE ATT&CK and ETDA/ThaiCERT Threat Actor Cards, enabling victim/motivation-adversary-technique pivoting.

catherine

The Catherine Framework is a general-purpose cybersecurity framework built to aggregate, validate, decode, decrypt, and maintain data.

cd00r.c

in https://funoverip.net/2011/03/cd00r-knocking-backdoor-improved/

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cdpsvclpe

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)