Java Vulnerability Exploitation Platform

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

远程调用(rpc)浏览器方法，免去抠代码补环境

AADInternals PowerShell module for administering Azure AD and Office 365

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Nuke It From Orbit - remove AV/EDR with physical access

A simple screen parsing tool towards pure vision based GUI agent

A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)

重构Beacon

JNDIExploit or a ysoserial.

reverse proxy, online proxy, 反向代理,免翻墙访问Youtube/twitter/Google, 支持github和telegram web登录(请注意不要通过不信任的代理进行登录)。支持DuckDuckGo AI Chat(可免费访问chatGPT3.5和Claude3)

寻找可利用的白文件

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

A memory scanning evasion technique

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).

🔐 Run frida-server on boot with Magisk, always up-to-date

一键提取exe的图标、嵌入图标、资源信息、版本信息、修改时间、数字签名，降低程序熵值

The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface.

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

real time face swap and one-click video deepfake with only a single image

efinance 是一个可以快速获取基金、股票、债券、期货数据的 Python 库，回测以及量化交易的好帮手！🚀🚀🚀

Linux权限维持

Testing TLS/SSL encryption anywhere on any port

js cookie逆向利器：js cookie变动监控可视化工具 & js cookie hook打条件断点

《反爬虫JS破解与混淆还原手册》 by @No-Attack @LoseNine。 一本教你JS破解以及混淆与还原的教程。欢迎star，持续更新。

Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.