scareing Goto Github PK

penetration_testing_poc

渗透测试有关的POC、脚本、提权小工具等，欢迎补充、完善

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

poc--exp

常用渗透poc收集

poc-t

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

py_chapter7

rubeus

Trying to tame the three-headed dog.

runas_demo

runpe-in-memory

Run a Exe File (PE Module) in memory (like an Application Loader)

scareing.github.io

scareing的Blog

self_defend

sinmapper

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

svchostdemo

Demo service that runs in svchost.exe

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

tokenplayer

Manipulating and Abusing Windows Access Tokens.

uac_wenpon

UAC_wenpon

vpsenvinstall

一键部署VPS渗透环境

winapi-tricks

Collection of various WINAPI tricks / features used or abused by Malware

windows_installer_file_read