Main Rule Repository

获取微信聊天记录数据库密钥并导出聊天记录，各版本通用。

Open repository for learning dynamic shellcode loading (sample in many programming languages)

Attack and defend active directory using modern post exploitation adversary tradecraft activity

Remote Code Injection In Log4j

Super JSP Webshell

A unique technique to execute binaries from a password protected zip

通过Web获取访客机器的hostname字段内容。

把msf生成的安卓远控附加进普通的app中，并进行加固隐藏特征。可以绕过常见的手机安全管家。

在cobaltstrike中使用的bof工具集，收集整理验证好用的bof。

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Fake Protocol Server

前端参数加密渗透测试通用解决方案

CVE-2020-4464 / CVE-2020-4450

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

Nim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness,…

微信消息解密工具

JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring

简单强大的多协议双向代理工具 A simple and powerful proxy

PowerShell rebuilt in C# for Red Teaming purposes

分享几个直接可用的内存马，记录一下学习过程中看过的文章

一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密

c++ fully undetected shellcode launcher ;)

A .NET Framework 4.0 Windows Agent

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

Covenant is a collaborative .NET C2 framework for red teamers.

Adversary Simulation Framework