Repositories list

• LuWu

  Public
  红队基础设施自动化部署工具

  redteamcobaltstrikevpsdeploy+ 2csinstallvps

  Python

  •

  Apache License 2.0

  •152•844•1•17•Updated Jan 4, 2023Jan 4, 2023

• PandaSniper

  Public
  Linux C2 框架demo，为期2周的”黑客编程马拉松“，从学习编程语言开始到实现一个demo的产物

  studyratredteam+ 1linuxc2

  C#

  •

  GNU General Public License v3.0

  •44•223•4•1•Updated Dec 8, 2022Dec 8, 2022

• CobaltStrike-Toolset

  Public
  Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

  cobalt-strikeaggressor-scriptsred-team+ 4kitsmalleable-c2-profilesexternal-c2a-team

  PowerShell

  •

  GNU General Public License v3.0

  •102•530•1•1•Updated Nov 22, 2022Nov 22, 2022

• BrowserGhost

  Public
  这是一个抓取浏览器密码的工具，后续会添加更多功能

  redteam

  C#

  •204•1.4k•4•1•Updated May 21, 2022May 21, 2022

• openssh-7.6p1-patch

  Public
  a patched sshd for red team activities

  C

  •29•80•2•0•Updated Aug 8, 2021Aug 8, 2021

• sharpwmi

  Public
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。

  sharpwmi

  C#

  •107•710•5•0•Updated Aug 3, 2021Aug 3, 2021

• dcpwn

  Public
  an impacket-dependent script exploiting CVE-2019-1040

  Python

  •15•72•0•0•Updated Jan 1, 2021Jan 1, 2021

• sunburst_decoder

  Public
  SUNBURST DGA decoder

  C#

  •6•11•1•0•Updated Dec 23, 2020Dec 23, 2020

• WeblogicEnvironment

  Public
  Weblogic环境搭建工具

  vul-environmentdockerweblogic-server

  Shell

  •100•770•7•0•Updated Apr 23, 2020Apr 23, 2020

• EventLogMaster

  Public
  Cobalt Strike插件 - RDP日志取证&清除

  PowerShell

  •73•360•0•0•Updated Dec 23, 2019Dec 23, 2019

• Papers

  Public
  Papers

  3•34•0•0•Updated Oct 29, 2019Oct 29, 2019

• ptrace

  Public
  a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志

  C

  •39•240•0•0•Updated May 8, 2019May 8, 2019

• HideShell

  Public
  A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

  Java

  •61•213•0•0•Updated Mar 31, 2019Mar 31, 2019

• CVE-2018-20250

  Public
  010 Editor template for ACE archive format & CVE-2018-2025[0-3]

  Python

  •15•25•0•0•Updated Feb 22, 2019Feb 22, 2019

• getpass

  Public
  a mini tool to dump password and NTLM hash from WDigest & MSV1_0 & tspkg, as a result of study of mimikatz

  C++

  •44•76•0•0•Updated Sep 27, 2018Sep 27, 2018

• ptyshell

  Public
  A reverse PTY shell in C

  C

  •28•101•0•0•Updated Sep 19, 2018Sep 19, 2018

• EventCleaner

  Public
  A tool mainly to erase specified records from Windows event logs, with additional functionalities.

  C++

  •147•589•7•1•Updated Sep 7, 2018Sep 7, 2018

• mscache

  Public
  a tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket

  Python

  •15•68•0•0•Updated Aug 22, 2018Aug 22, 2018

• redis_lua_exploit

  Public
  Python

  •31•142•2•0•Updated Jun 20, 2018Jun 20, 2018

• KerberosUserEnum

  Public
  Kerberos accounts enumeration taking advantage of AS-REQ

  Python

  •16•43•1•0•Updated Apr 25, 2018Apr 25, 2018

• cisco_ppc_rsp

  Public
  A debugger in Python for Cisco c3560

  Python

  •11•10•0•0•Updated Apr 24, 2018Apr 24, 2018

• NtlmSocks

  Public
  a pass-the-hash tool

  Go

  •33•107•0•0•Updated Mar 1, 2018Mar 1, 2018

• SerialWriter

  Public
  SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.

  java

  Java

  •21•103•0•0•Updated Feb 28, 2018Feb 28, 2018