mcafee-sitelist-pwd-decryption

Herramienta de descifrado de contraseñas en Python3 para el archivo SiteList.xml de McAfee. Autor: [email protected] Blog: http://funoverip.net Fecha: 10 de febrero de 2016 Referencias: https://funoverip.net/2016/02/mcafee-sitelist-xml-password-decryption/...

clamav

ClamAV ClamAV® es un motor antivirus de código abierto para detectar troyanos, virus, malware y otras amenazas maliciosas. Documentación y preguntas frecuentes La documentación de ClamAV está alojada en docs.clamav.net. El archivo fuente de cada versión también incluye una copia de la documentaci...

batchfuscate

batchfuscate 一个简单高效的脚本，让您的批处理载荷无法被检测。 要求： root@kitploit: 1. 必须在 Windows 和 Linux 上安装 python3 2. pip install termcolor pip install pystyle pip install tqdm pip install colorama pip install requests 安装：- root@kitploit: 1. 克隆仓库 2. pip install -r requirements.txt 3. python3 bat.py 使用方法： root@kitploit:...

spraykatz

Spraykatz Spray love around the world Index...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

macos_xprotect

Introducción a macOS - XProtect Continuando con mi serie de entradas de blog sobre introducción a macOS, he decidido dedicar una breve entrada a XProtect. ¿Qué es XProtect? XProtect es el antivirus y sistema de firmas de malware integrado de Apple para macOS. Funciona como parte de XProtectServic...

HydraDragonAntivirus

Hydra Dragon Antivirus 📚 有关详细文档、架构图和组件指南，请访问我们的 项目 Wiki。 警告：正在进行积极开发 此项目尚未做好生产准备。 可能会发生破坏性更改、错误和不完整的功能。 ⚠️ 注意：本仓库严格面向专家级恶意软件分析师和安全研究人员。 其中包含需要专业知识才能安全处理的底层系统组件和实验性安全驱动程序。 !CAUTION 🛑 用户责任与防护限制 HydraDragon 旨在防范恶意自动化威胁 ，而非人为错误或故意的系统修改。 1. 手动删除 ：该杀毒软件不会 阻止您运行诸如 rd C: /s /q...

avcleaner

avcleaner Ofuscador de código fuente C/C++ para evasión de antivirus Publicaciones del blog La implementación es bastante compleja y este dominio del desarrollo de software rara vez se documenta en términos sencillos. Por eso existen publicaciones en el blog que detallan cada decisión de diseño y...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

pompelmi

pompelmi — 面向 Node.js 的 ClamAV 杀毒扫描 ClamAV 杀毒扫描，适用于 Node.js — 简洁、类型安全、零依赖。 pompelmi Pro — 审计日志、优先支持和企业级功能。了解更多 快速开始bash Scan a file npx pompelmi scan ./uploads/file.pdf Scan a directory npx pompelmi scan ./uploads --recursive Output as JSON npx pompelmi scan ./uploads --json root@kitploit: 文档 | 指...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

CVE-2022-21907

CVE-2022-21907 - Vulnerabilidad de ejecución remota de código en la pila del protocolo HTTP ⚠️ Solo con fines educativos y de investigación de seguridad autorizada Autores del Exploit Original Muy agradecidos al autor original del PoC NU11SECURITY y a michelep Descripción: Vulnerabilidad de...

AVBypass

绕过杀毒软件保护 要求 已安装 golang 用法 root@kitploit: 1 - create your payload go run create.go e.g: go run create.go 1.1.1.1 443 SecRetkira https://www.youtube.com/watch?v=Rv4VzpGCEEM 2 - in output folder you will find shell.go compile it go build shell.go 3 - now you have exe file to execute run netcat 4 - y...

CVE-2012-4681-Armoring

CVE-2012-4681-Blindaje Resumen general Un experimento manual de blindaje de evasión de antivirus para CVE-2012-4681 inspirado por http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Exploit base: http://pastie.org/4594319 Resultados al 26/9/2014 y 2/8/2016...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

fudshell

fudshell 一款高效的脚本，用于生成红队所需的FUD持久反向Shell。请勿将生成的载荷上传至VirusTotal 警告： root@kitploit: 请勿将任何载荷上传至VirusTotal。如果被检测到，请告知我， 我会更新载荷。 如果需要Cobalt Strike规避方案，请通过Telegram联系我：@R0ot1337 使用方法： root@kitploit: 1. 输入LHOST（你的IP地址） 2. 输入LPORT（你的端口） 3. 生成PowerShell载荷后。 4. 使用netcat监听（nc -lvnp 你在LPORT中指定的端口） 安装：...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

Armor

Armor Armor 是一个简单的 Bash 脚本，旨在创建能够逃避杀毒软件检测的加密 macOS 有效载荷。以下是使用简单 Netcat 有效载荷运行 Armor 的示例 GIF。 在端口 4444 上启动一个 Netcat 监听器。读取 "payload.txt" 文件，其中包含一个简单的 Bash 单行命令，执行后将在目标 MacBook 和攻击者的 Netcat 监听器之间建立 TCP 连接。Armor 用于加密该 Bash 单行命令。Ncat 用于在攻击者的服务器上托管解密密钥。当在目标 MacBook 上执行跳板程序时（GIF 中未显示），Bash...