A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

Python codes of my blog.

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

渗透测试中的一些开源工具按照Att&ck 流程进行归类

Attack and defend active directory using modern post exploitation adversary tradecraft activity

A series of Powershell scripts to configure a Windows Server 2016 to CIS Benchmark standards

This repo contains my custom scripts for Penetration Testing and Red Team Assessments. I will keep on updating this repo as and when I get time.

与反病毒软件老大哥们的打闹日常

Defeating Windows User Account Control

My musings with PowerShell

Wiki to collect Red Team infrastructure hardening resources

内网渗透脚本

learning shell