Repositories list

• ComDotNetExploit

  Public
  A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and reflection techniques for code injection. This PoC showcases bypassing code integrity checks and loading malicious payloads in highly protected processes such as LSASS. Based on research from James Forshaw.

  C++

  •21•0•0•0•Updated Mar 2, 2025Mar 2, 2025

• WhatsAppKeyBOF

  Public
  A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.

  C

  •

  GNU General Public License v3.0

  •5•0•0•0•Updated Mar 2, 2025Mar 2, 2025

• Venom-JWT

  Public
  针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)

  Go

  •6•0•0•0•Updated Mar 1, 2025Mar 1, 2025

• ETWShellcodeLoader

  Public
  Shellcode Loader Utilizing ETW Events

  C++

  •

  MIT License

  •6•0•0•0•Updated Feb 26, 2025Feb 26, 2025

• readntfs_nim

  Public
  POC to read files from a NTFS volume

  Nim

  •1•0•0•0•Updated Feb 25, 2025Feb 25, 2025

• BHDataExtractor

  Public
  Python

  •1•0•0•0•Updated Feb 24, 2025Feb 24, 2025

• NotSoObviousDNSC2

  Public
  DNS C2 framework written in python. With encrypted communications. Based on the following C2 Framework: https://github.com/chriselgee/ObviousDNSC2

  Python

  •

  MIT License

  •1•0•0•0•Updated Feb 24, 2025Feb 24, 2025

• DefenderYara

  Public
  Extracted Yara rules from Windows Defender mpavbase and mpasbase

  YARA

  •60•0•0•0•Updated Feb 24, 2025Feb 24, 2025

• SoaPy

  Public
  SoaPy is a Proof of Concept (PoC) tool for conducting offensive interaction with Active Directory Web Services (ADWS) from Linux hosts.

  Python

  •14•0•0•0•Updated Feb 21, 2025Feb 21, 2025

• firejail

  Public
  Linux namespaces and seccomp-bpf sandbox

  C

  •

  GNU General Public License v2.0

  •588•0•0•0•Updated Feb 20, 2025Feb 20, 2025

• VulBERT

  Public
  使用PyTorch微调BERT实现漏洞分类模型

  Jupyter Notebook

  •

  MIT License

  •1•0•0•0•Updated Feb 19, 2025Feb 19, 2025

• RtlClone

  Public
  C

  •8•0•0•0•Updated Feb 18, 2025Feb 18, 2025

• AmsiBypassUacDetector

  Public
  Detect BypassUAC using AMSI

  C++

  •

  MIT License

  •2•0•0•0•Updated Feb 18, 2025Feb 18, 2025

• SecLists

  Public
  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  PHP

  •

  MIT License

  •24k•1•0•0•Updated Feb 18, 2025Feb 18, 2025

• MultiTshProxy

  Public
  tsh多终端代理通信

  C

  •2•0•0•0•Updated Feb 18, 2025Feb 18, 2025

• TokenTacticsV2

  Public
  A fork of the great TokenTactics with support for CAE and token endpoint v2

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •37•0•0•0•Updated Feb 17, 2025Feb 17, 2025

• CVE-update

  Public
  一个CVE漏洞预警知识库 no exp/poc

  16•0•0•0•Updated Feb 17, 2025Feb 17, 2025

• Mirror-Flowers

  Public
  基于 AI 的代码安全审计工具，支持多种编程语言的代码分析，可以帮助开发者快速发现代码中的潜在安全漏洞。支持DeepSeek-R1，ChatGPT-4o等多种大模型。

  Python

  •24•0•0•0•Updated Feb 17, 2025Feb 17, 2025

• SnowEyes

  Public
  一款用于网页敏感信息检测，指纹识别的chrome插件

  JavaScript

  •6•0•0•0•Updated Feb 17, 2025Feb 17, 2025

• WebcamBOF

  Public
  C

  •11•0•0•0•Updated Feb 16, 2025Feb 16, 2025

• cubieboard-livesuite

  Public
  Livesuite instructions and prebuilt binaries for Cubieboard NAND flashing

  1•0•0•0•Updated Feb 16, 2025Feb 16, 2025

• AWSRedirector

  Public
  HCL

  •12•0•0•0•Updated Feb 16, 2025Feb 16, 2025

• WinMal

  Public
  Advanced PowerShell-based red team implant along with a custom C2 (Command & Control) server

  1•0•0•0•Updated Feb 14, 2025Feb 14, 2025

• ktransformers

  Public
  A Flexible Framework for Experiencing Cutting-edge LLM Inference Optimizations

  Python

  •

  Apache License 2.0

  •792•0•0•0•Updated Feb 13, 2025Feb 13, 2025

• wpprobe

  Public
  A fast WordPress plugin enumeration tool

  Go

  •

  MIT License

  •39•0•0•0•Updated Feb 13, 2025Feb 13, 2025

• bootlicker-2

  Public
  bootlicker: A terribly written but functioning UEFI shellcode bootkit patched into a firmware volume or boot device on the EFI partition

  C

  •3•0•0•0•Updated Feb 11, 2025Feb 11, 2025

• Stifle

  Public
  .NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS

  C#

  •5•0•0•0•Updated Feb 10, 2025Feb 10, 2025

• binlex

  Public
  A Binary Genetic Traits Lexer Framework

  Rust

  •

  GNU Lesser General Public License v3.0

  •54•0•0•0•Updated Feb 9, 2025Feb 9, 2025

• resym

  Public
  Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.

  Rust

  •

  Apache License 2.0

  •23•0•0•0•Updated Feb 9, 2025Feb 9, 2025

• StringReaper

  Public
  Reaping treasures from strings in remote processes memory

  C

  •

  MIT License

  •18•0•0•0•Updated Feb 8, 2025Feb 8, 2025