内网渗透中的一些工具及项目资料

.NET C# Tools

一个轻量级的 socks5 代理, 带简单加密传输功能, 可穿透 GFW

ip域名反查、权重查询以及ICP备案查询。便于提交SRC时资产过滤。

批量查询ip对应域名及百度权重、备案信息；ip反查域名；ip查备案信息；资产归属查询；百度权重查询

Minimalist Web Notepad

一个好用的在线记事本

Protected Process Dumper Tool

A platform for community discussion. Free, open, simple.

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

Identifies the bytes that Microsoft Defender flags on.

C# obfuscator that bypass windows defender

Windows杀软在线对比辅助

助力每一位RT队员，快速生成免杀木马

Windows NT Syscall tables

Windows NT x64 syscall fuzzer

Security product hook detection

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

BOF内存运行exe

记录ssh或sudo明文密码

Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.

基于golang实现的impacket