StudyCat404 / WhatAVLinks
windows pc 端杀毒软件识别（需要tasklist 命令执行的结果）
☆43Updated 4 years ago
Alternatives and similar repositories for WhatAV
Users that are interested in WhatAV are comparing it to the libraries listed below
Sorting:
- PrintNightMare LPE提权漏洞的CS 反射加载插件。开箱即用、通过内存加载、混淆加载的驱动名称来ByPass Defender/EDR。☆148Updated 3 years ago
- OXID_Find by Csharp（多线程） 通过OXID解析器获取Windows远程主机上网卡地址 From @RcoIl☆54Updated 4 years ago
- CobatStrike-Script, Beacon上线,微信实时推送!☆44Updated 5 years ago
- CVE-2021-4034, For Webshell Version.☆34Updated 3 years ago
- 创建服务持久化☆107Updated 4 years ago
- ☆16Updated 4 years ago
- OXID_Find by C++（多线程） 通过OXID解析器获取Windows远程主机上网卡地址☆83Updated 4 years ago
- https://rcoil.me/2019/09/%E3%80%90%E7%BC%96%E7%A8%8B%E3%80%91SharpDecryptPwd/ 的示例代码☆49Updated 4 years ago
- 记录一下我学习的Win32CPP☆55Updated 3 years ago
- ☆3Updated 2 years ago
- exchange-ssrf-rce☆78Updated 4 years ago
- ☆93Updated 3 years ago
- ☆39Updated 5 years ago
- 使得Cobaltstrike支持Atexec☆88Updated 4 years ago
- CrossC2通信协议API实现☆84Updated 3 years ago
- ☆37Updated 6 years ago
- e-mesaage <=4.15 后台jar包上传exp☆47Updated 6 years ago
- Csharp 反射加载dll☆40Updated 3 years ago
- 一个cobaltstrike shellcode加载器，过国内主流杀软☆124Updated 4 years ago
- Python script for auto remove AV☆45Updated 5 years ago
- PrintSpoofer的反射dll实现，结合Cobalt Strike使用☆88Updated 3 years ago
- 利用 NTLMSSP 探测 Windows 信息☆168Updated 2 years ago
- ☆28Updated 5 years ago
- 替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆149Updated 3 years ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。☆107Updated 4 years ago
- 窃取当前用户的ssh，sudo密码☆69Updated 2 years ago
- DomainFronting(aliyun)远程加载shellcode，远程获取shellcode使用aes动态加密传输数据☆48Updated 4 years ago
- Use ICMP requests to check the alive subnet.☆24Updated 3 years ago
- go shellcode 加载器☆67Updated 5 years ago
- c++ shellcode loader☆40Updated 2 years ago