Black cat magic ฅ(＾・ω・＾ฅ ✿)

Windows shellcode development in Rust

🔥一个清新文艺的微社区

Gitalk is a modern comment component based on Github Issue and Preact.

An open-source Chinese font derived from Fontworks' Klee One. 一款开源中文字体，基于 FONTWORKS 出品字体 Klee One 衍生。

Useful Cobalt Strike BOFs found or used during engagements

List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly

一款基于docker的渗透测试工具箱，致力于做到渗透工具随身携带、开箱即用。减少渗透测试工程师花在安装工具、记忆工具使用方法上的时间和精力。

恶意的CS服务器

🍵 Gitea repository migration remote command execution exploit.

pydumpck is a multi-threads tool for decompile exe,elf,pyz,pyc packed by python which is base on pycdc and uncompyle6.sometimes its py-file result …

List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly

Retrieves values from JSON objects for data binding

腾讯课堂《SQLite数据库逆向分析》

解密Windows微信聊天记录数据库

Lists of .NET Obfuscator (Free, Trial, Paid and Open Source )

onion-routing ransomware blog indexer & aggregator 🧅👹

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

Free, Open Source, User-Mode SMB 1.0/CIFS, SMB 2.0, SMB 2.1 and SMB 3.0 server and client library

通过正则搜索、批量反编译特定Jar包中的class名称

CloudFlare 5秒盾第一层混淆代码一键还原

Checking SeBackupPrivilege

A C# DLL injection library

Badge Reader Active Tap

A tool for converting SysWhispers2 syscalls for use with Nim projects

Docker Automated Build Repository for siomiz/chrome -- Google Chrome via VNC (or via Chrome Remote Desktop)

ECMAScript/JavaScript engine in pure Go

🎉Back end of Sonic cloud real machine testing platform. Sonic云真机测试平台后端服务。

A RSSHub for Pythonista

NanoCore rat stub source code

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

[WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...

BOF combination of KillDefender and Backstab

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

Calculate string similarity library, integrate multiple algorithms on the back end。计算字符串相似度库，后端集成多种算法[从零实现]

Tiny SHell is an open-source UNIX backdoor.

A very lightweight syntax highlighter for Vue.js & vue 3, supports multiple coding languages, read only.

A collection of scripts for assessing Microsoft Azure security

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

A WinDbg extension to trace COM interactions

Call NtCreateUserProcess directly as normal.

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

Java web common vulnerabilities and security code which is base on springboot and spring security

https://wiki.openjdk.java.net/display/jdk8u

An open source custom password filter DLL and userspace service to better protect / control Active Directory domain passwords.

Simple undetectable shellcode and code injector launcher example. Inspired by RTO malware development course.

PowerShell MachineAccountQuota and DNS exploit tools

CSS trick/bug to display a brighter white by exploiting browsers' HDR capability and Apple's EDR system

Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

Computer object takeover through Resource-Based Constrained Delegation (msDS-AllowedToActOnBehalfOfOtherIdentity)

This repository helps you to have a more beautiful and attractive github profile, and you can access a complete set of tools and guides for beautif…

A minimal but opinionated dict/object combo (like Bunch).

Package your Node.js project into an executable