the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

peanalyzer

peanalyzer 高级可移植可执行文件分析器 Python 3.5.2：已测试（可用） 用法 python peanalyzer.py --file file.exe --show all|file-path|general|dos-header|file-header|optional-header|data-directory|section-headers|imports python peanalyzer.py --file file.exe --disassemble all 安装 root@kitploit: git clone...

ROPInjector

ROPInjector 一款用C（Win32）编写的工具，可将任意Shellcode转换为ROP，并注入到给定的可移植可执行文件（PE）中。仅支持32位目标PE文件和x86指令集。 在Blackhat USA 2015上发布，论文标题为《ROPInjector: Using Return Oriented Programming for Polymorphism and Antivirus Evasion》 更多信息：...

bn-uefi-helper

bn-uefi-helper 注意：此插件已被弃用。详见 EFI Resolver 描述 用于分析UEFI固件的辅助插件。该插件包含以下功能： 为入口点函数应用正确的原型 修复段，使所有段均为 RWX 并具有正确的语义 这允许全局函数指针正确呈现 为核心UEFI服务（来自EDK-II）应用类型 定位已知协议GUID，并分配GUID类型和符号 在入口和初始化函数中定位全局赋值，并分配类型 EFISYSTEMTABLE、EFIRUNTIMESERVICES、EFIBOOTSERVICES 等 简洁可执行文件的加载器 最低版本 已在 2.3.2660 上测试 许可协议 此插件根据 MIT...

frostbyte

FrostByte 前言： 过去几天我一直在尝试 AppDomain 管理器注入 技术，在之前的红队演练中，它针对某些 EDR 取得了不错的成功。虽然这对于初始访问向量来说非常不错，但我想发布一个 POC，帮助你将 shellcode 隐藏在其他地方。不再需要嵌入 shellcode 的 DLL 文件！ 问题！ 虽然这是一项独立使用时非常出色的技术，但当与诸如通过 ISO/ZIP/VHD/VHDX 文件发送 C ClickOnce 之类的投递技术结合时，真正的问题是：有十分之一的概率，用于 appdomain 的 DLL 会被 AV/EDR 的 AI/ML 启发式检测到。这是因为在初始化...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC This PoC is provided for educational and research purposes only. The author takes no responsibility for misuse or damage caused by this code. This PowerShell script is a testing tool for simulating the attack described in CVE-2013-3900. CVE-2013-3900 concerns the...

unicorn_pe

Unicorn PE Unicorn PE is an unicorn based instrumentation project/framework designed to emulate code execution for windows PE files, especially packed ones. This project is archived and no longer maintained. sogen is recommended as a successor. Feature Dump PE image from emu-memory into file, fix...

radare2-scripts

Scripts de radare2 Resumen Una 'colección' de scripts para usar con radare2. r2bincarver.py - Un script usado para extraer archivos de volcados de memoria. r2hashfuncdecoder.py - Un script usado para decodificar funciones con hash, comúnmente encontradas en shellcode. Scripts Binary Carver Este...

py_certificate_extractor

pycertificateextractor 有时需要从数字签名文件中提取证书信息。 当这种情况发生时，使用此工具，你可以轻松完成。 如果有任何变更或所需的新功能，请告知。 功能 从数字签名文件中提取证书信息并导出（另存为）证书文件。仅此而已。 v1.0.0 https://github.com/password123456/digitalsignedpefilecertificateextractor/blob/main/Changes 预览...

cve-2021-40444

cve-2021-40444 Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444 Files including malicious word and cab-file may be downloaded on any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Note! The domain name in the original malicious...

PE-CoA

PE-CoA Code Implementation of "Pattern Enhanced Multi-Turn Jailbreaking: Exploiting Structural Vulnerabilities in Large Language Models" The full paper is available at: https://arxiv.org/pdf/2510.08859 Chain of Attack Setup Instructions Installation 1. Install dependencies : root@kitploit: pip...

pev

readpe pev se ha movido a @mentebinaria/readpe y tiene un nuevo mantenedor. :...

cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

pe2pic

English || 简体中文 pe2pic Small visualizator for PE files Getting started Install the dependencies by: root@kitploit: pip install -r requirements.txt Usage root@kitploit: usage: pe2pic.py -h --infile INFILE --outfile OUTFILE --double --minheight MINHEIGHT PE visualizer options: -h, --help show this...

ExportDumper

ExportDumper Una pequeña herramienta que hice para volcar la tabla de exportaciones de archivos PE. El caso de uso principal estaba pensado para usarse dentro de un proxy de DLL. Uso root@kitploit: .\ExportDump dllpath p. ej. root@kitploit: .\ExportDump C:\Windows\System32\version.dll Dumping all...

XPEViewer

Visor/editor de archivos PE para Windows, Linux y MacOS. Descarga: https://github.com/horsicq/XPEViewer/releases Cómo ejecutar: https://github.com/horsicq/XPEViewer/blob/master/docs/RUN.md Cómo compilar: https://github.com/horsicq/XPEViewer/blob/master/docs/BUILD.md Registro de cambios:...

RansomLord

RansomLord NG v1.0 Anti-Ransomware exploit tool. Proof-of-concept tool that automates the creation of PE files, used to exploit ransomware pre-encryption. Updated version NG: https://github.com/malvuln/RansomLord/releases/tag/v1.0 Lang: C SHA256:...

RunPE

RunPE Cargador reflectivo de C para binarios no administrados. Uso root@kitploit: Usage: RunPE.exe e.g. RunPE.exe C:\Windows\System32\net.exe localgroup administrators Alternative usage: RunPE.exe ---f ---b ---a e.g: RunPE.exe ---f C:\Windows\System32\svchost.exe ---b ---a Opciones de configuraci...

mal_unpack

malunpack...

siofra

Zusammenfassung Siofra ist ein Tool zur Identifizierung und Ausnutzung von DLL-Hijacking-Schwachstellen in Windows-Programmen. Es ist in der Lage, den Windows-Loader zu simulieren, um Einblick in alle Abhängigkeiten und entsprechenden Schwachstellen einer PE-Datei auf der Festplatte zu geben, ode...