kkin77 Goto Github PK

duckmemoryscan

检测绝大部分所谓的内存免杀马

e-message_exp

e-mesaage <=4.15 后台jar包上传exp

emperor

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

exploits

exploits-1

Pwn stuff.

fastjson

Fastjson姿势技巧集合

fastjson-local-echo

基于dbcp的fastjson rce 回显

fuzz_dic

参数 | 字典 collections

geacon_pro

重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

getmail

利用NTLM Hash读取Exchange邮件

godzilla-plugin-store

golangbypassav

研究利用golang来bypassAV

greatsct

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

gui_tools

一个由各种图形化渗透工具组成的工具集

hack-requests

The hack-requests is an http network library for hackers

impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javasec

自己学习java安全的一些总结，主要是安全审计相关

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

javaweb-vuls

jslink_xray

从js文件中提取url等并与Xray联动

lightsocks

⚡️一个轻巧的网络混淆代理🌏

limelighter

A tool for generating fake code signing certificates or signing real ones

linux-privilege-escalation-mindmap

OSCP Privilege Escalation MindMap/Guide

lstar

LSTAR - CobaltStrike 综合后渗透插件

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

maliciousmacromsbuild

Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

meetc2

Modular C2 framework aiming to ease post exploitation for red teamers.