burpbounty Goto Github PK

atlasldr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

avcleaner

C/C++ source obfuscator for antivirus bypass

awesome-electronjs-hacking

A curated list of awesome resources about Electron.js (in)security

buggi

Golang Simple Anti Debugger & Anti Http Debugger

burpbounty.github.io

Burpbounty.github.io

callstackspoofingpoc

C++ self-Injecting dropper based on various EDR evasion techniques.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chian_healty

clipboardhistorythief

POC tool to extract all persistent clipboard history data from clipboard service process memory

evilsln

A New Exploitation Technique for Visual Studio Projects

exchangeowa

一款OutLook信息收集工具

flavortown

Various ways to execute shellcode

formthief

Spoofing desktop login applications with WinForms and WPF

gofuscator

Source code obfuscator for Golang

graphstrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

hackerpermkeeper

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

headerlesspe

hebrewcqpweb

hikvision_isecure_center-rce

HIKVISION iSecure Center RCE 海康威视综合安防管理平台任意文件上传 POC&EXP（一键getshell）

home-grown-red-team

hunterexport

奇安信全球鹰Hunter数据批量查询导出工具

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

javascript-obfuscator-ui

A web UI to the JavaScript Obfuscator node.js package.

joplin

Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.

js-tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom JavaScript payloads in clients.

kerbeus-bof

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

mdpocs

猫蛋儿安全团队编写的poc能报就能打。企业微信、海康、Metabase、Openfire、泛微OA......

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

microsoft-activation-scripts

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.