Skip to content

@Sec-Fork 无情的 Fork 机器

Change the repository type filter

All

    Repositories list

    2.6k repositories

    • sharp-execute

      Public
      Execute dotnet app from unmanaged process
      C++
      •9•0•0•0•Updated Dec 29, 2024Dec 29, 2024

    • LitterBox

      Public
      sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment
      YARA
      •23•0•0•0•Updated Dec 29, 2024Dec 29, 2024

    • 38c3_com_talk

      Public
      Slides for COM Hijacking AV/EDR Talk on 38c3
      6•0•0•0•Updated Dec 28, 2024Dec 28, 2024

    • ADcheck

      Public
      Assess the security of your Active Directory with few or all privileges.
      Python
      •
      GNU General Public License v3.0
      •27•0•0•0•Updated Dec 27, 2024Dec 27, 2024

    • tun2proxy

      Public
      Tunnel (TUN) interface for SOCKS and HTTP proxies
      Rust
      •
      MIT License
      •101•1•0•0•Updated Dec 27, 2024Dec 27, 2024

    • Godzilla-v300

      Public
      三色哥斯拉（Godzilla）
      9•0•0•0•Updated Dec 26, 2024Dec 26, 2024

    • clematis

      Public
      PE to shellcode
      Python
      •22•0•0•0•Updated Dec 26, 2024Dec 26, 2024

    • PanGP_Extractor

      Public
      Tool to extract username and password of current user from PanGPA in plaintext
      C++
      •14•0•0•0•Updated Dec 23, 2024Dec 23, 2024

    • Evil-BW16-Control-Panel

      Public
      A sleek and intuitive GUI built with Tkinter for managing the Evil-BW16 device, designed for ethical WiFi network testing and penetration testing.
      Python
      •
      MIT License
      •3•0•0•0•Updated Dec 21, 2024Dec 21, 2024

    • Krueger

      Public
      Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
      C#
      •
      GNU General Public License v3.0
      •26•0•0•0•Updated Dec 20, 2024Dec 20, 2024

    • trust-validator

      Public
      Validates priv escalation of AD trusts
      Python
      •6•0•0•0•Updated Dec 20, 2024Dec 20, 2024

    • sccmhound

      Public
      A BloodHound collector for Microsoft Configuration Manager
      C#
      •
      GNU General Public License v3.0
      •14•0•0•0•Updated Dec 19, 2024Dec 19, 2024

    • SharpHunter

      Public
      Automated Hosting Information Hunting Tool - Windows 主机信息自动化狩猎工具
      C#
      •27•0•0•0•Updated Dec 19, 2024Dec 19, 2024

    • aad-bofs

      Public
      AzureAD beacon object files
      C
      •8•0•0•0•Updated Dec 18, 2024Dec 18, 2024

    • ReflectiveLoader

      Public
      A Reflective Loader for macOS
      C++
      •19•0•0•0•Updated Dec 17, 2024Dec 17, 2024

    • Unsafe-Unpacking

      Public
      Unsafe Unpacking Vulnerability: Lab Code, Semgrep Rules and Secure Implementation Guide
      HTML
      •3•0•0•0•Updated Dec 16, 2024Dec 16, 2024

    • RustSoliloquy

      Public
      A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
      Rust
      •
      MIT License
      •18•0•0•0•Updated Dec 15, 2024Dec 15, 2024

    • FuzzyAI

      Public
      A powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential security vulnerabilities in their LLM APIs.
      Python
      •
      Apache License 2.0
      •11•0•0•0•Updated Dec 15, 2024Dec 15, 2024

    • hrtng

      Public
      IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
      C++
      •
      GNU General Public License v3.0
      •65•0•0•0•Updated Dec 14, 2024Dec 14, 2024

    • FileRenameJunctionsEDRDisable

      Public
      C++
      •17•0•0•0•Updated Dec 13, 2024Dec 13, 2024

    • Shrike

      Public
      Hunting and injecting RWX 'mockingjay' DLLs in pure nim
      Nim
      •3•0•0•0•Updated Dec 11, 2024Dec 11, 2024

    • DCOMUploadExec

      Public
      DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
      C++
      •39•0•0•0•Updated Dec 10, 2024Dec 10, 2024

    • ldapx

      Public
      Flexible LDAP proxy that can be used to inspect & transform all LDAP packets generated by other tools on the fly.
      Go
      •
      MIT License
      •3•1•0•0•Updated Dec 9, 2024Dec 9, 2024

    • bof-launcher

      Public
      Beacon Object File (BOF) launcher - library for executing BOF files in C/C++/Zig applications
      Zig
      •
      BSD 3-Clause "New" or "Revised" License
      •16•0•0•0•Updated Dec 9, 2024Dec 9, 2024

    • QoL-BOFs

      Public
      Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning
      C
      •13•0•0•0•Updated Dec 6, 2024Dec 6, 2024

    • PowerDACL

      Public
      A tool to abuse weak permissions of Active Directory Discretionary Access Control Lists (DACLs) and Access Control Entries (ACEs)
      PowerShell
      •7•0•0•0•Updated Dec 5, 2024Dec 5, 2024

    • BootExecuteEDR

      Public
      C
      •58•0•0•0•Updated Dec 5, 2024Dec 5, 2024

    • x-waf

      Public
      WAF自动化绕过工具
      11•0•0•0•Updated Dec 4, 2024Dec 4, 2024

    • fscan-bypass-2

      Public
      fscan的魔改和一些免杀，优化了存活扫描和端口扫描的输出，更加直观舒适的使用。
      Go
      •2•0•0•0•Updated Dec 4, 2024Dec 4, 2024

    • Prometheus

      Public
      Recon scripts for Red Team and Web blackbox auditing
      Python
      •
      Apache License 2.0
      •2•0•0•0•Updated Dec 3, 2024Dec 3, 2024