airfloats Goto Github PK

parat

Python based Remote Administration Tool(RAT)

passtojs

爆破js加密的后台登陆；JS加密；爆破密码；PyExecJS

pe_to_shellcode

Converts PE into a shellcode

port_resue

Linux下应用层注入/hook技术实现端口复用

power-kill

power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes

process-prevent-killed

some way to prevent process be killed

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

rebeacon_src

reveng_rtkit

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

revshell

C-based Reverse Shell that uses CMD or PowerShell

rootkitdemo

研一时期的工程实践，一个linux下的root kit程序，能够实现远程访问，获取shell，隐藏文件进程端口

shellcodefluctuation

An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

shelljack

A keystroke / terminal logger for Linux.

study-pdf

自己内核学习路上查阅的paper的pdf

sugar-linux-banben

hook时候版本很详细

titanhide

Hiding kernel-driver for x86/x64.

who_exp

c语言实现who命令