powerglot

Powerglot Powerglot 使用多语言混写技术对多种脚本进行编码，例如攻击性的 PowerShell 脚本。无需加载器即可运行载荷。 在红队演练或攻击任务中，通常使用隐写术来掩盖载荷，尤其是为了绕过网络层面的防护，而最常见的载荷脚本是用 PowerShell 编写的。最近的恶意软件和 APT 组织利用了其中一些能力：APT32、APT37、Ursnif、Powload、LightNeuron/Turla、Platinum APT、Waterbug/Turla、Lokibot、The Dukes（Ghost 行动）、Titanium 等。 Powerglot...

network-pentest-metasploitable2

Network / System Penetration Test — Metasploitable 2 !Type...

Exploit for OS Command Injection in Sophos Unified_Threat_Management

sophucked CVE-2020-25223 RCE PoC, gets reverse shell. Pre-auth...

RedELK - Easy Deployable Tool For Red Teams Used For Tracking And Alarming About Blue Team Activities As Well As Better Usability In Long Term Operations

Red Team's SIEM - easy deployable tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability for the Red Team in long term operations. Initial public release at BruCON 2018: Video: https://www.youtube.com/watch?v=OjtftdPts4g Presentation slides:...

MalwLess - Test Blue Team Detections Without Running Any Attack

MalwLess is an open source tool that allows you to simulate system compromise or attack behaviours without running processes or PoCs. The tool is designed to test Blue Team detections and SIEM correlation rules. It provides a framework based on rules that anyone can write, so when a new technique...