SysWhispers on Steroids - AV/EDR evasion via direct system calls.

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

A curated list of awesome resources related to executable packing

Recover the default privilege set of a LOCAL/NETWORK SERVICE account

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

Defeating Windows User Account Control

Collection of Remote Management Monitoring tool artifacts, for assisting forensics and investigations

windows-kernel-exploits Windows平台提权漏洞集合

Scan/Exploit - EternalBlue MS17-010 - Windows 7 32/64 Bits

UAC bypass, Elevate, Persistence methods

Utilizing DirectX and DShowNET assemblies to record video from a host's webcam

Win32 and Kernel abusing techniques for pentesters

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Terminate AV/EDR Processes using kernel driver

kill anti-malware protected processes ( BYOVD) (Microsoft Won )

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use with Evilginx3. May be updated periodically.

CVE-2023-38831 winrar exploit generator

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

My own OSCP guide

Netcat for windows 32/64 bit

Automated exploit scanner for cameras on the internet

A list of public attacks on BitLocker

This tool gives information about the phone number that you entered.

Automated Subdomain Enumeration and Scanning Tool

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

indirect syscalls for AV/EDR evasion in Go assembly

This repo contains C/C snippets that can be handy in specific offensive scenarios.