今天在收藏什么

• ROADtools A collection of Azure AD/Entra tools for offensive and defensive security purposes ★ 2720
• BloodHound.py A Python based ingestor for BloodHound ★ 2444
• mitm6 pwning IPv4 via IPv6 ★ 1920
• krbrelayx Kerberos relaying and unconstrained delegation abuse toolkit ★ 1665
• ldapdomaindump Active Directory information dumper via LDAP ★ 1430

I'm a security researcher and using this platform to share my projects and research :)

• Nidhogg Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions. ★ 2481
• Sandman Sandman is a NTP based backdoor for hardened networks. ★ 819
• FunctionStomping Shellcode injection technique. Given as C++ header, standalone Rust program or library. ★ 706
• Cronos PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners. ★ 628
• Venom Venom is a library that meant to perform evasive communication using stolen browser socket ★ 397

• hARMless A Linux ELF Packer/Loader for EDR evasion ★ 48
• LLM-Fingerprinter LLM fingerprinting system that identifies the underlying LLM model family ★ 15
• EDRHookDetector A tool to detect EDR hooks on Linux - Userland and kernel level hooks ★ 14
• hARMful A Linux Ransomware Framework demonstrating EDR evasion using io_uring and direct syscalls. ★ 3
• EscapeWatch Container escape security scanner for Docker, Kubernetes and other container environments. ★ 2