32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo/cve-2024-6387-poc

（周瑜）Java - SpringBoot 持久化 WebShell 学习demo（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）

检测查杀java内存马

通过jsp脚本扫描java web Filter/Servlet型内存马

远程调用(rpc)浏览器方法，免去抠代码补环境

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

not a reverse-engineered version of the Cobalt Strike Beacon

Linux下用于远程加载可执行文件以达到内存加载的目的

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

Transparently tunnel your IP traffic through ICMP echo and reply packets.

Simple reverse ICMP shell

Tunnel TCP connections through ICMP.

A fast TCP/UDP tunnel over HTTP

mTLS-Encrypted Back-Connect SOCKS5 Proxy

提取DC日志，快速获取域用户对应IP地址

寻找可利用的白文件

通过端口复用直接进行正向socks5代理（非防火墙分流）

golang 实现的windows and linux 端口复用工具。

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

Automatic ProxyShell Exploit

Bookit / Windows Login Password and Bitlocker Bypass Tool

多功能 java agent 内存马

一款Spring综合漏洞的利用工具，工具支持多个Spring相关漏洞的检测以及利用

利用阿里云oss对象存储，来转发http流量实现（cs）Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。

A Rust port of shadowsocks

Supports multi-person collaborative penetration testing graphical framework, Lua plug-in extension, domain front-end/CDN online, custom multiple modules, custom sRDI, file management, process manag…

A .NET Runtime for Cobalt Strike's Beacon Object Files

FilterBased/ServletBased in memory shell for Tomcat and some other middlewares

A method of bypassing EDR's active projection DLL's by preventing entry point exection