QAX-A-Team / ptraceView external linksLinks
a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志
☆245May 8, 2019Updated 6 years ago
Alternatives and similar repositories for ptrace
Users that are interested in ptrace are comparing it to the libraries listed below
Sorting:
- 红队基础设施自动化部署工具☆852Jan 4, 2023Updated 3 years ago
- CVE-2019-1040 with Exchange☆253Jun 18, 2021Updated 4 years ago
- A Java runtime information-gathering tool which uses the Java Attach API for information acquisition☆204Apr 26, 2021Updated 4 years ago
- CVE-2019-2725 命令回显☆436May 8, 2023Updated 2 years ago
- WINDOWS TELEMETRY权限维持☆258Jul 2, 2020Updated 5 years ago
- reGeorg的特殊版本，适用于老版本weblogic。☆151Apr 30, 2020Updated 5 years ago
- fastjson 1.2.68 版本 autotype bypass☆142Jun 17, 2022Updated 3 years ago
- ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6☆217Aug 17, 2017Updated 8 years ago
- 总结了20+.Net反序列化文章，持续更新☆747Apr 3, 2024Updated last year
- 窃取mstsc中的用户明文凭据☆47Apr 23, 2021Updated 4 years ago
- Cobalt Strike插件 - RDP日志取证&清除☆363Dec 23, 2019Updated 6 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,200Oct 17, 2023Updated 2 years ago
- BCS（北京网络安全大会）2019 红队行动会议重点内容☆821Sep 4, 2019Updated 6 years ago
- ☆146Jun 20, 2018Updated 7 years ago
- a webshell resides in the memory of java web server☆699Jun 26, 2018Updated 7 years ago
- 通过 Redis 主从写出无损文件☆719May 25, 2020Updated 5 years ago
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆711May 10, 2021Updated 4 years ago
- backdoor☆262Jul 26, 2025Updated 6 months ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆458Mar 24, 2022Updated 3 years ago
- 绕过专业工具检测的Webshell研究文章和免杀的Webshell☆1,732Nov 15, 2020Updated 5 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆929Jan 7, 2026Updated last month
- PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist☆665Feb 24, 2021Updated 4 years ago
- sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆717Aug 3, 2021Updated 4 years ago
- Burp suite 分块传输辅助插件☆2,021Feb 23, 2022Updated 3 years ago
- Behinder3.0 Beta4 源码（Decompile and Fixed）☆206Sep 1, 2020Updated 5 years ago
- ☆835Jun 7, 2022Updated 3 years ago
- dynamic crawler for web vulnerability scanner☆253Mar 4, 2020Updated 5 years ago
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆615Dec 29, 2021Updated 4 years ago
- Flask 内存马☆312Mar 26, 2021Updated 4 years ago
- IAST 灰盒扫描工具☆448Jul 19, 2022Updated 3 years ago
- 伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者☆363Apr 24, 2022Updated 3 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆729Mar 21, 2022Updated 3 years ago
- fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java☆403Dec 16, 2022Updated 3 years ago
- Exchange2010 authorized RCE☆157Dec 24, 2020Updated 5 years ago
- 用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆868Jul 21, 2019Updated 6 years ago
- 帮助java环境下任意文件下载情况自动化读取源码的小工具☆167Apr 5, 2019Updated 6 years ago
- 利用NTLM Hash读取Exchange邮件☆441Jan 7, 2025Updated last year
- Steal privileged token to obtain SYSTEM shell☆252Jul 14, 2020Updated 5 years ago
- 内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~☆498Feb 13, 2020Updated 6 years ago