huoji120/DuckMemoryScan external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

huoji120/DuckMemoryScan

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/huoji120/DuckMemoryScan)

Close

huoji120 / DuckMemoryScanView on GitHubMore

• External links
• Readme badge

检测绝大部分所谓的内存免杀马

☆735Sep 15, 2022Updated 3 years ago

Alternatives and similar repositories for DuckMemoryScan

Users that are interested in DuckMemoryScan are comparing it to the libraries listed below

• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆294Jul 25, 2021Updated 4 years ago
• RoomaSec / RmEye

  View on GitHub
  戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
  ☆536Oct 25, 2023Updated 2 years ago
• FunnyWolf / pystinger

  View on GitHub
  Bypass firewall for traffic forwarding using webshell
  ☆1,430Sep 29, 2021Updated 4 years ago
• dr0op / CrossNet-Beta

  View on GitHub
  红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。
  ☆366Jun 19, 2024Updated last year
• Airboi / bypass-av-note

  View on GitHub
  免杀技术大杂烩---乱拳也打不死老师傅
  ☆1,094Mar 29, 2021Updated 4 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆638Apr 4, 2021Updated 4 years ago
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,404Jan 18, 2022Updated 4 years ago
• DeEpinGh0st / Erebus

  View on GitHub
  CobaltStrike后渗透测试插件
  ☆1,554Oct 28, 2021Updated 4 years ago
• iceyhexman / flask_memory_shell

  View on GitHub
  Flask 内存马
  ☆313Mar 26, 2021Updated 4 years ago
• c0ny1 / java-memshell-scanner

  View on GitHub
  通过jsp脚本扫描java web Filter/Servlet型内存马
  ☆988Mar 9, 2023Updated 2 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆731Sep 1, 2021Updated 4 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆491Apr 26, 2023Updated 2 years ago
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,522Jul 17, 2021Updated 4 years ago
• feihong-cs / Java-Rce-Echo

  View on GitHub
  Java RCE 回显测试代码
  ☆1,016Oct 15, 2020Updated 5 years ago
• Rvn0xsy / Cooolis-ms

  View on GitHub
  Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…
  ☆929Jan 7, 2026Updated last month
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆615Dec 29, 2021Updated 4 years ago
• mai1zhi2 / ShellCodeFramework

  View on GitHub
  绕3环的shellcode免杀框架
  ☆574Mar 19, 2021Updated 4 years ago
• 1y0n / AV_Evasion_Tool

  View on GitHub
  掩日 - 免杀执行器生成工具
  ☆2,759Aug 18, 2025Updated 6 months ago
• wafinfo / Sunflower_get_Password

  View on GitHub
  一款针对向日葵的识别码和验证码提取工具
  ☆922Nov 1, 2021Updated 4 years ago
• lengjibo / RedTeamTools

  View on GitHub
  记录自己编写、修改的部分工具
  ☆1,461Oct 19, 2025Updated 4 months ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,012May 21, 2024Updated last year
• wonderkun / go-packer

  View on GitHub
  golang打包二进制进行免杀
  ☆234Apr 7, 2021Updated 4 years ago
• QAX-A-Team / BrowserGhost

  View on GitHub
  这是一个抓取浏览器密码的工具，后续会添加更多功能
  ☆1,456May 21, 2022Updated 3 years ago
• uknowsec / SharpDecryptPwd

  View on GitHub
  对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。源码：https://github.com/RowTeam/SharpDecrypt…
  ☆1,260Mar 16, 2022Updated 3 years ago
• veo / wsMemShell

  View on GitHub
  WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
  ☆1,488Apr 10, 2023Updated 2 years ago
• SkewwG / domainTools

  View on GitHub
  内网域渗透小工具
  ☆734Apr 20, 2021Updated 4 years ago
• QAX-A-Team / sharpwmi

  View on GitHub
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆716Aug 3, 2021Updated 4 years ago
• Adminisme / ServerScan

  View on GitHub
  ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
  ☆1,635Jun 16, 2024Updated last year
• inbug-team / InScan

  View on GitHub
  边界打点后的自动化渗透工具
  ☆1,891Jul 19, 2021Updated 4 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆965Aug 5, 2021Updated 4 years ago
• xiecat / goblin

  View on GitHub
  一款适用于红蓝对抗中的仿真钓鱼系统
  ☆1,535May 30, 2023Updated 2 years ago
• bitterzzZZ / MemoryShellLearn

  View on GitHub
  分享几个直接可用的内存马，记录一下学习过程中看过的文章
  ☆975Mar 23, 2022Updated 3 years ago
• rootclay / WMIHACKER

  View on GitHub
  A Bypass Anti-virus Software Lateral Movement Command Execution Tool
  ☆1,464Jan 20, 2025Updated last year
• r35tart / RedisWriteFile

  View on GitHub
  通过 Redis 主从写出无损文件
  ☆719May 25, 2020Updated 5 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• RoomaSec / RmTools

  View on GitHub
  蓝队应急工具
  ☆542Jun 10, 2024Updated last year
• Hzllaga / ShellcodeLoader

  View on GitHub
  将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术。
  ☆521Jul 9, 2020Updated 5 years ago
• boy-hack / go-strip

  View on GitHub
  清除Go编译时自带的信息
  ☆855Jul 20, 2022Updated 3 years ago
• Hzllaga / BT_Panel_Privilege_Escalation

  View on GitHub
  宝塔面板Windows版提权方法
  ☆325Jan 26, 2021Updated 5 years ago