imhexgh0st Goto Github PK

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

antivirus-artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

backdoors

Simple linux backdoors and hiding techniques

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cdpsvcdllhijacking

Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM

cmder

Lovely console emulator package for Windows

cve-2021-1675

Impacket implementation of CVE-2021-1675

cve-2021-1675-lpe-exp

CVE-2021-1675 LPE Exploit

cve-2021-22005

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-3156

Sudo Baron Samedit Exploit

cve-2021-3156-plus

CVE-2021-3156非交互式执行命令

cve-2021-3157

Root shell PoC for CVE-2021-3156

cve-2021-40444

CVE-2021-40444 PoC

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)

dirtcow

脏牛Linux本地提权漏洞复现(CVE-2016-5195)

dllhsc

DLLHSC - DLL Hijack SCanner a tool to assist with the discovery of suitable candidates for DLL Hijacking

ghost

:ghost: RAT (Remote Access Trojan) - Silent Botnet - Full Remote Command-Line Access - Download & Execute Programs - Spread Virus' & Malware

icmpsh

Simple reverse ICMP shell

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

lilith

Lilith, The Open Source C++ Remote Administration Tool (RAT)

n00brat

Remote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service

printnightmare

printnightmare-impacket

copy of original PrintNightmare git repo + Impacket

qt-rat

Remote administration tool with Qt5

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reptile

LKM Linux rootkit

signthief

Windows PE Signature Thief in C++

signtoolui

A graphical user interface (Winforms) to easily sign Executable and DLL content using the Signtool.exe provided in the Windows SDK.