SecStarBot
Follow
Stars
Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
Samples from my book Windows Native API programming
Jar Obfuscator - 一个 JAR/CLASS 字节码混淆工具，支持包名/类名/方法名/字段名/参数名引用分析和重命名混淆方式，支持字符串加密/整型异或混淆/垃圾代码花指令混淆/等方式，支持方法和字段的隐藏，支持 NATIVE 层的 JVMTI 代码加密，配置简单，文档教程齐全，容易上手
Zerologon exploit with restore DC password automatically
Golang implement winrm client with pass the hash
### A security tool for enterprise terminal management that named Hephaestus
本项目是基于Neo-reGeorg进行二次开发，对PHP木马添加了AES加密，修改了请求体和响应体特征
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
not a reverse-engineered version of the Cobalt Strike Beacon
CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。
BackdoorSim: An Educational into Remote Administration Tools
Source generator to add D/Invoke and indirect syscall methods to a C# project.
Microsoft-Outlook-Remote-Code-Execution-Vulnerability
蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。
Supports multi-person collaborative penetration testing graphical framework, Lua plug-in extension, domain front-end/CDN online, custom multiple modules, custom sRDI, file management, process manag…
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
本项目是一个远程控制应用，使用 Golang 开发，允许用户通过 Web 界面远程控制和屏幕监控其他计算机。主要功能包括屏幕共享、鼠标和键盘控制以及键盘记录。
Modified versions of the Cobalt Strike Process Injection Kit
Basic Multiplatform Remote Administration Tool - Xamarin