A professional cross-platform SSH/Sftp/Shell/Telnet/Tmux/Serial terminal.

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Tinyhttpd 是J. David Blackstone在1999年写的一个不到 500 行的超轻量型 Http Server，用来学习非常不错，可以帮助我们真正理解服务器程序的本质。官网:http://tinyhttpd.sourceforge.net

windows-kernel-exploits Windows平台提权漏洞集合

🔥 比libevent/libuv/asio更易用的网络库。A c/c++ network library for developing TCP/UDP/SSL/HTTP/WebSocket/MQTT client/server.

Defeating Windows User Account Control

linux-kernel-exploits Linux平台提权漏洞集合

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

Cross-platform multi-protocol VPN software. This repository is officially managed by Daiyuu Nobori, the founder of the project. Pull requests should be sent to the master repository at https://gith…

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

Simple reverse ICMP shell

A tool to kill antimalware protected processes

LoadLibrary for offensive operations

A modern 64-bit position independent implant template

A root exploit for CVE-2022-0847 (Dirty Pipe)

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

C/C++ source obfuscator for antivirus bypass

Original C Implementation of the Hell's Gate VX Technique

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

Linux技术栈

AV Evasion Tool For Red Team Ops

A .NET Runtime for Cobalt Strike's Beacon Object Files

TCP Port Redirection Utility

Tiny SHell is an open-source UNIX backdoor.

Execute unmanaged Windows executables in CobaltStrike Beacons

在Windows环境下的进程注入方法：远程线程注入、创建进程挂起注入、反射注入、APCInject、SetWindowHookEX注入

免杀，bypassav，免杀框架，nim，shellcode，使用nim编写的shellcode加载器

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file