bestspear / SharkOne

Related projects: ⓘ

• evilashz / PigScheduleTask
  添加计划任务方法集合
  ☆250Updated last year
• Rvn0xsy / SchtaskCreator
  远程创建任务计划工具
  ☆180Updated 2 years ago
• Rvn0xsy / j2osWin
  ☆151Updated 3 months ago
• ZhuriLab / Joker
  ☆173Updated this week
• wangfly-me / SysHttpHookSleep
  集合多种方式的ShellcodeLoader
  ☆117Updated last year
• Ridter / PySQLTools
  Mssql利用工具
  ☆260Updated last year
• chainreactors / malice-network
  Next Generation C2 Framework
  ☆78Updated this week
• baimao-box / Self-Defective-Program
  无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API
  ☆79Updated 4 months ago
• M0nster3 / RpcsDemo
  关于RPC一些绕EDR的tips
  ☆154Updated last year
• H4de5-7 / schtask-bypass
  ☆199Updated this week
• WBGlIl / ReBeacon_Src
  ☆189Updated this week
• 0x727 / UserRegEnum_0x727
  域内普通域用户权限查找域内所有计算机上登录的用户
  ☆141Updated last year
• 1y0n / AVKiller
  一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）
  ☆117Updated 8 months ago
• INotGreen / Bypass-AMSI
  ☆51Updated last year
• mabangde / SharpGetUserLoginIPRPC
  提取域控日志，支持远程提取
  ☆141Updated last year
• HackerCalico / Unique_DLL_Hijacking_Scan
  DLL Hijacking 批量挖掘工具，用于快速生成指定文件夹下所有 EXE 的 Unique DLL Hijacking Payload
  ☆100Updated last month
• crisprss / BypassUserAdd
  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
  ☆330Updated 2 years ago
• 0x727 / CloudSandbox
  收集云沙箱上线C2的ip，如微X、奇XX、3X0、virustX等
  ☆123Updated 10 months ago
• c1y2m3 / FileSearch
  C++枚举磁盘列表、遍历指定盘搜索特定类型文件/微信导出密钥,文件回传等功能
  ☆151Updated last year
• yanghaoi / ridhijack
  通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).
  ☆74Updated 2 years ago
• H4de5-7 / elevate-bypass
  ☆190Updated this week
• M0nster3 / Beacon
  重构Beacon
  ☆105Updated last month
• loong716 / CPPPractice
  ☆96Updated this week
• a1phaboy / bypassAVNote
  免杀死亡笔记
  ☆117Updated last year
• yutianqaq / Supernova_CN
  Supernova 的中文版和扩展了一些加密方式（ROT, XOR, RC4, AES, CHACHA20, B64XOR, B64RC4, B64AES, B64CHACHA20）
  ☆43Updated 6 months ago
• lele8 / SharpUserIP
  获取服务器或域控登录日志
  ☆269Updated last year
• qi4L / CallbackLoader
  Callback Function Loader Implemented in Go
  ☆136Updated 5 months ago
• PDWR / 3vilGu4rd
  This is a daemon process which make a programe runing all time.
  ☆84Updated 2 years ago
• INotGreen / Webshell-loader
  ASPX内存执行shellcode,绕过Windows Defender（AV/EDR）
  ☆104Updated 9 months ago
• XiaoliChan / zerologon-Shot
  Zerologon exploit with restore DC password automatically
  ☆129Updated 6 months ago