坤坤CS 基于CobaltStrike cat 4.5二开项目 添加反沙箱、反测绘。集成常用后渗透插件，开箱即用
☆265Apr 18, 2025Updated 11 months ago
Alternatives and similar repositories for CobaltStrike-KunKun
Users that are interested in CobaltStrike-KunKun are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Shiro反序列化漏洞综合利用，在原版工具上进行一些功能增加。☆167Apr 3, 2025Updated last year
- 综合后渗透方面的杂烩☆580Mar 1, 2026Updated last month
- 助力红队成员一 键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan☆619Aug 7, 2024Updated last year
- JavaGadgetGenerator 工具，支持 ysoserial，Hessian，字节码，Expr/SSTI，Shiro，JDBC 等 Gadget 生成，封装，混淆，出网延迟探测，内存马注入等...☆560Apr 3, 2026Updated last week
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆281Jul 17, 2025Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- 集权利用工具☆167Feb 28, 2025Updated last year
- 后渗透信息/密码/凭证收集工具☆289May 7, 2025Updated 11 months ago
- 哥斯拉webshell管理工具二次开发规避流量检测设备☆1,059Dec 2, 2025Updated 4 months ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆181Apr 17, 2024Updated last year
- 新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell☆673Feb 12, 2026Updated last month
- 渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理☆1,395Feb 28, 2025Updated last year
- 助力每一位RT队员，快速生成免杀木马☆830Apr 17, 2024Updated last year
- shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软☆925Apr 18, 2025Updated 11 months ago
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆42Feb 19, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！☆711Jan 21, 2025Updated last year
- MDUT-Extend(扩展版本)☆907Mar 27, 2026Updated 2 weeks ago
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,839Aug 2, 2024Updated last year
- 用于Webshell木马免杀、流量加密传输，多多支持star☆1,041Jun 27, 2025Updated 9 months ago
- P001water二开的fscan☆288Sep 28, 2024Updated last year
- 一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload☆582Dec 24, 2025Updated 3 months ago
- Stealthy Payload loader with Anti-EDR Capabilities☆136Apr 21, 2025Updated 11 months ago
- 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT …☆284Aug 12, 2025Updated 7 months ago
- xxl-job内存马☆229Jan 26, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…☆484Feb 1, 2026Updated 2 months ago
- What AV? 一款轻量级的杀软在线识别的项目，持续更新ing☆268Oct 23, 2025Updated 5 months ago
- The first Computer Emergency Response (ARK) Tools for young people ;) 年轻人的第一款应急响应(ARK)工具 ；）☆671Oct 21, 2025Updated 5 months ago
- 一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader☆1,486Feb 19, 2025Updated last year
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,401Mar 30, 2026Updated last week
- Xia_Yue_Plus 瞎越 增强版☆72Aug 20, 2025Updated 7 months ago
- 面向红队的, 高性能高度自由可拓展的自动化扫描引擎 | A highly controllable and extensionable automated scanning engine for red teams☆2,041Feb 3, 2026Updated 2 months ago
- 一款基于PE Patch技术的后渗透免杀工具，主要支持x64☆356Mar 5, 2025Updated last year
- 本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。☆547Jul 12, 2025Updated 8 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- 一款面向SRC漏洞挖掘中，页面信息收集场景的浏览器扩展，自动收集页面及相关资源中的敏感信息与可疑线索，支持基础扫描、深度递归扫描、批量 API 测试及结果导出与自定义正则配置☆613Mar 22, 2026Updated 2 weeks ago
- 一款Java内存马生成、测试工具，搭配@ax1sX的MemShell食用。☆263Feb 15, 2026Updated last month
- 轻量级的无害化钓鱼~☆279Nov 28, 2024Updated last year
- 复杂请求下的Shiro反序列化利用工具☆422Mar 12, 2024Updated 2 years ago
- 一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具☆409Oct 6, 2024Updated last year
- Exchange 信息收集工具☆54Jan 4, 2025Updated last year
- A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具☆567Apr 1, 2026Updated last week