hades

About Hades is a proof of concept loader that combines several evasion technques with the aim of bypassing the defensive mechanisms commonly used by modern AV/EDRs. Usage The easiest way, is probably building the project on Linux using make. git clone https://github.com/f1zm0/hades && cd hades ma...

hades

소개 Hades 는 현대 AV/EDR에서 일반적으로 사용되는 방어 메커니즘을 우회하는 것을 목표로 여러 회피 기술을 결합한 개념 증명 로더입니다. 사용법 가장 쉬운 방법은 Linux에서 make를 사용하여 프로젝트를 빌드하는 것입니다. git clone https://github.com/f1zm0/hades && cd hades make 그런 다음 실행 파일을 x64 Windows 호스트로 가져와서 .\hades.exe options로 실행하면 됩니다. PS .\hades.exe -h '||' '||' | '||''|...

Awesome-WAF

Awesome WAF 웹 애플리케이션 방화벽WAF에 대한 모든 것을 보안 관점에서 다룹니다. 🔥 서문: 이것은 원래 WAF에 대한 개인 컬렉션이었습니다. 이제 펜테스터와 연구자들에게 유용할 수 있기를 바라며 오픈소스로 공개합니다. 흔히 말하듯, "커뮤니티는 서로 배웁니다." 간결한 정의: 방화벽은 웹 애플리케이션과 클라이언트 엔드포인트 사이에 위치한 보안 정책 시행 지점입니다. 이 기능은 소프트웨어나 하드웨어로 구현될 수 있으며, 어플라이언스 장치나 일반 운영 체제를 실행하는 일반 서버에서 실행될 수 있습니다. 독립형 장치이거...

isr-sqlget

-- ISR - Infobyte Security Research -- | ISR-sqlget | www.infobytesec.com | ..:: 설명 ISR-sqlget: Perl로 개발된 블라인드 SQL 인젝션 도구입니다. 데이터베이스 스키마와 테이블 행을 가져올 수 있습니다. 단일 GET/POST를 사용하여 데이터베이스 구조에 조용히 접근할 수 있으며 단일 GET/POST를 사용하여 모든 테이블 행을 CSV 형식의 파일로 덤프할 수 있습니다. 지원하는 데이터베이스: - IBM DB2 - Microsoft SQL Server...

upx

ooooo ooo ooooooooo. ooooooo ooooo 888' 8' 888 Y88. 8888 d8' 888 8 888 .d88' Y888..8P 888 8 888ooo88P' 8888' 888 8 888 .8PY888. 88. .8' 888 d8' 888b YbodP' o888o o888o o88888o The Ultimate Packer for eXecutables Copyright c 1996-2026 Markus Oberhumer, Laszlo Molnar & John Reiser...

RedPeanut

RedPeanut oooooooooooooooooo ooooooooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooo ooooooooooooooooooooooooooooooooooooooooooo oooooooooooooooooooooooooooo oooooooooooooooooooooooooooooooooooooo RedPeanutv0.3.0@b4rtik 현재 테스트 중입니다. 알려진 모듈 문제: process - spawnasagent process -...

Rusty-Playground

Rusty-Playground 🦀 オフェンシブセキュリティと回避技術を示す Rust プログラム集 ツール| 説明| 参照 ---|---|--- ClipboardMon| クリップボードの変更を監視し、検出された変更に応じてクリップボードの内容を記録するか、ファイルをコピーします。| - DumpMDEConfig| Microsoft Defender を列挙して、システム上で有効な除外パス、許可された脅威、保護履歴、ASR（攻撃面の縮小）ルールを特定します。管理者権限は不要です。| 出典 ElevateToken|...

Awesome_Malware_Techniques

Awesome マルウェア技術 マルウェア技術を分析・研究するための厳選リソースリスト。 Unprotect: Unprotect は、コードスニペットと検出ルールを提供するオープンなマルウェア回避技術データベースです。 LolBas: Living Off The Land バイナリ、スクリプト、およびライブラリ。 ORKL: 脅威インテリジェンスレポートの検索エンジン。 HijackLibs: DLL ハイジャックの候補となる厳選リスト。DLL と脆弱な実行ファイルのマッピングが維持されており、この Web サイトから検索できます。 Living Off Trusted Sites:...

BlackSnufkin

🎯 プロフィール概要 ついに私のGithubプロフィールを見つけましたね。 何か改善できると思ったら、遠慮なくプロジェクトをクローン/フォークし、Issueを立てたりPRを送ってください。 write-upや研究の詳細は私のブログで - 楽しいハッキングを！ 😊 struct OffensiveOperator handle: String, role: String, specialties: Vec, baseofoperations: String, primarylanguages: Vec, impl OffensiveOperator fn new - Self Self...

Malicious code in dolyame-ui-tablemobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e83dfbec7c8c38fc214c12578dd5688a786c7d1048d0b32d305a1c8df9c1d3 On require of dolyame-ui-tablemobile, index.js loads bootstrap.js which selects a platform-specific payload path, fetches bytes from one of three...

Malicious code in dolyame-ui-buttonstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d10bbe41547b5406844f6d8c48d4d73e8f59cf6fe0f53544c636671b76baeb8 [email protected] is a dropper. index.js unconditionally requires setup.js on load, which selects a per-platform binary path, fetches...

Malicious code in devplatform-zod-wip-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2629721fa3107222cef1f1669d474e7b3b45346ed87a455a168c1d199d9c6492 [email protected] is a typosquat/lookalike of the zod ecosystem that acts as an import-time dropper. index.js unconditionally...

MAL-2026-13275 Malicious code in devplatform-zod-wip-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2629721fa3107222cef1f1669d474e7b3b45346ed87a455a168c1d199d9c6492 [email protected] is a typosquat/lookalike of the zod ecosystem that acts as an import-time dropper. index.js unconditionally...

MAL-2026-13301 Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20a9180ff2928b0498496b59c96983db044063b8db7c5e258b6518d5daf00a On require of this package, index.js loads bridge.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...

Malicious code in dolyame-boxy-desktop-bnpl-hero-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 036c11daa7712014748d57bc2bca8a37672acffa8f3eaca83161b726ba473fdb On require of the package, helpers.js reassembles hostnames from split string arrays e.g. 'oob-worker.cf102-baf.workers.dev',...

Malicious code in dolyame-boxy-independent-bnpl-info-slider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1752274e08bd28f5be07afaa71cafeea1e7822330016892d0f06abd6c50681 On require of the package, index.js loads vendor.js which downloads a platform-specific binary from a string-concatenation-obfuscated list of...

Malicious code in dolyame-ui-pie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f473b4f8898130c8b57fd3a129bf81a38b449ea8970e58a6e4c486943eb5579 Requiring the package triggers async initialization in support.js that downloads a platform-specific binary linux x64/arm64, darwin, win32 from...

Malicious code in eacq-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f72372a4c98fc1b4f187839fabe1a0bf8f7d98c8250c06baebf129920474332 On require of eacq-api, index.js loads compat.js which reconstructs C2 hostnames from string-split fragments oob-worker.cf100,1,2,3-.workers.dev and ...

MAL-2026-12915 Malicious code in bnpl-blocks-desktop-bnpl-button-set (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7581057c70b3b5e805e0d56c30e74c4fc88c8c23aa0ceb73a46a2b17b937bb0 On require of the package, index.js loads polyfill.js which selects a platform-specific asset, fetches a binary from string-fragmented Cloudflare...

Malicious code in bnpl-blocks-desktop-bnpl-category-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a277db0429a37308bb1ce8f4d8f051e7be7b04cf8c327c10b967d9a7b17da75b The package's main entry unconditionally requires support.js, which at load time fetches a platform-specific native binary from obfuscated Cloudflare...