项目说明
Infosec Useful Stuff
This repository is my own list of tools / useful stuff for pentest, defensi, programming, lockpicking and physical security (all resources are in English only)
If you want to add something you can ask a pull request or send me the link on ;)
Menu
Reverse Engineering / PownOpen Source IntelligencePentestingSocial Engineering / Phishing / Forensics / Incident ResponseCryptography802.11, Wifi, Bluetooth, BLE, ZigBee / IoT / LoraWan / GSM / RF Security / Cars HackingHardware / Firmware SecurityWindows Offensi / Red-TeamingDefensi / Blue-TeamingMobile HackingThreat Intelligence / Malwares AnalysisLockpicking - Physical SecurityProgrammingReverse Engineering / Pown - Back To Menu
x86 architecture
x64 architecture
ARM architecture
Generic stuff
- Awesome resources about Reverse Engineering - Windows memory hacking library (x86 and x64 support) - PEDA - Python Exploit De Assistance for GDB - This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures. - Hooking Firefox with Frida - This repo is a collection of (mostly physical memory exposing) drivers. No more deeper analysis was done on them, so some might not work. Also, there is no PoC a. So for short, if you want to use any of these, reverse them yourself to figure out how to use.DLL Injections Tricks
- Call a C# Method from C/C++ (nati))) - Make a Named Pipe DLL (Cplusplus) - Using Named Pipes (C# communication with your C++ Named Pipe) - sRDI – Shellcode Reflective DLL Injection - Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.Hooking Libraries / Resources
- The Minimalistic x86/x64 API Hooking Library for Windows - x86/x64 C++ Hooking Library - The different ways of hookingDirectX / OpenGL / Hooks
- An uni Dear ImGui Hook for Directx12 D3D12 (D3D11, D3D10 and maybe will be added later) - Uni Directx11 D3D11 Hook Project for all directx11 - 10 applications with ImGui and InputHook included, fullscreen supported - Uni graphical hook for a D3D9-D3D12, OpenGL and based games.Open Source Intelligence - Back To Menu
- Awesome resources about OSINT - Dark Web search engine (Tor not needed) - In journalism website - Find GitHub secrets in real time - An ad Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while e most API limitations. - Hunt down social media accounts by username across social networksPentesting - Back To Menu
Web Security
- Awesome resources about web security - Awesome resources about web securityDarkmoon - Open source (GPL-3.0) autonomous AI penetration testing platform co web, API, Acti and Kubernetes, with proof of exploitation and a local privacy gateway. - A curated list of amazingly awesome Burp Extensions. - Awesome Burp Suite Resources. 400+ open source Burp plugins, 500+ posts and . - grep rough audit - source code auditing tool - Directory/File, DNS and VHost busting tool written in Go - In-depth Attack Surface Mapping and Asset Discovery - subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passi sources. - Source code disclosure .git folderGeneric stuff
- Awesome resources (generic) - A list of useful payloads and bypass for Web Application Security and Pentest/CTFSocial Engineering / Phishing / - Back To Menu
- Awesome resources about Social Engineering - Open-Source Phishing Toolkit in GoLangForensics / Incident Response - Back To Menu
- Awesome resources about forensics - Awesome resources about Incident Response - is not an Incident Responder (How attackers can manipulate ’s URL link scanning to provide clean response) - DumpIt provides a con way of obtaining a memory image of a Windows system even if the analyst is not physically sitting in front of the target computer. - CyLR - Li Collection Tool - Super timeline all the things Tools (psteal) - Collaborati timeline analysisCryptography - Back To Menu
- Awesome resources about cryptography802.11, Wifi, Bluetooth, BLE, ZigBee / IoT / LoraWan / GSM / RF - Back To Menu
- Awesome resources about IoT hacks - Practical Guide to Bluetooth Low Energy Hacking - RFSec-ToolKit is a collection of Radio Frequency Communication Protocol Hacktools Security / Cars Hacking - Back To Menu
- A curated list of resources for learning about security and car hackingHardware / Firmware Security - Back To Menu
- Awesome resources about firmware security - Semi-in attacks, a new approach to hardware security analysis - A complete whitepaper about the hardware security analysisWindows Offensi / Red-Teaming - Back To Menu
- Awesome resources about Red-Teaming - Red-Teaming Toolkit - Awesome resources about Red-Teaming - Ad Tactics - PowerShell Training - The BloodHound C# Ingestor - BloodHound uses graph theory to reveal hidden relationships and attack paths in an Acti en - Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication ser NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication. - Introduction of APT attacks with the different stages (Reconnaissance, Initial Compromise, Persistence, Command and Control, Pri Escalation, Lateral Mo, Asset Discovery and Data Exfiltration) - Defeating Windows User Account Control - Pass The Hash Technique - Extract credentials from lsass remotely - lsassy (Tool to extract credentials from lsass remotely) - Introduction to BloodHound - Introduction to Kerberos - Kerberoasting (Part1) - Kerberoasting (Part2) - Kerberoasting (Part3) - Red Team Tactics: Combining Direct System Calls and sRDI to bypass AV/EDR (LSASS dump with dumpert) - This tool compares a targets patch levels against the Microsoft database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules a for the missing bulletins. - Persistence can be achieved with Appx/UWP apps using the debugger options (Cortana/People App) - BlueGate - Proof of Concept (Denial of Service) for C and C. These allows an unauthenticated attacker to gain remote code execution with highest pri via RD Gateway for RDP. - Acti Common Attacks - Some scripts useful for red team acti - Acti Attack Defense & Detection - Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensi, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. - The goal of this repository is to document the most common and known techniques to bypass AppLocker. - The Sysinternals Troubleshooting Utilities have been rolled up into a single Suite of tools. - Identifies the bytes that Microsoft Defender flags on. - Create fake certs for binaries using windows binaries and the power of bat files. - Self-hosted / MetaDefender wannabe with API, demo UI and Scanners running in Docker. - This repo contains information about EDRs that can be useful during red team exercise. - EDRHunt scans Windows services, drivers, processes, registry for installed EDRs (Endpoint Detection And Response). - PIC lsass dumper using cloned handles. - Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted. It's a proof-of-concept of the talk of ROOTCON & HITCON 2021, check out Skrull Like A King: From File Unlink to Persistence - ScareCrow is a payload creation framework for side loading (not injecting) into a legitimate Windows process (bypassing Application Whitelisting controls). Once the DLL loader is loaded into memory, it utilizes a technique to flush an EDR’s hook out of the system DLLs running in the process's memory. - PEzor, an Open-Source PE Packer, Red teamers often have the necessity of bypassing A and I recently needed a more powerful tool than x0rro in order to perform some tasks and bypass a solution that I was targeting. - Inceptor is a template-based PE packer for Windows, designed to help penetration testers and red teamers to bypass common AV and EDR solutions. Inceptor has been designed with a focus on usability, and to allow extensive user customisation. - A protective and Low Le Loader that defeats modern EDR systems. - Implementing Syscalls In The Cobaltstrike Artifact Kit. - Cobalt Strike Beacon Object File (BOF) that takes the name of of a PE file as an argument and spawns the process in a suspended state. - Azure Outlook Command & Control. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP = Abuse Microsoft Graph API for C2 Operations. - A post exploitation framework designed to operate co on heavily monitored en. - Having an obfuscated artifact from Cobalt Strike is nice in that you' evaded detection, but wouldn't it be nice to have it deleted and still running? All credits included in the repository, as they should! - A tool to make socks connections through HTTP agents. - Weevely - Weaponized web shell - socks connections through PHP.Defensi / Blue-Teaming - Back To Menu
- Building an open-source SIEM: combining ELK, Wazuh HIDS and Elastalert for optimal performanceMobile Hacking - Back To Menu
Android
- Reverse Engineering Apk Files - The Mobile Hacking CheatSheet is an attempt to summarise a few interesting basics info regarding tools and commands needed to assess the security of Android and iOS mobile applications. - Hacking With Frida — FridaLab #1Threat Intelligence / Malwares Analysis - Back To Menu
- A curated list of awesome Threat Intelligence resources - The World’s First Truly Open Threat Intelligence Community - A Search Engine for Threats - Analyze suspicious files and URLs to detect types of malware, automatically share them with the security community - RiskIQ Community brings petabytes of internet intelligence directly to your fingertips. In threats by pi through attacker infrastructure data. - MITRE ATT&CK™ is a globally-accessible knowledge base of ad tactics and techniques based on real-world obser. The ATT&CK knowledge base is used as a foundation for the de of specific threat models and methodologies in the private sector, in go, and in the cybersecurity product and service community.Lockpicking / Physical Security - Back To Menu
- A curated list of awesome guides, tools, and other resources related to the security and compromise of locks, safes, and keys. - 20 Awesome Lockpicking Resources for Beginners - Physical Penetration Testing (SHA2017)Programming - Back To Menu
Reality (VR)
- Build Your First VR App - A curated list of License
This repository is licensed under the MIT License - see the LICENSE file for details
项目信息
开发语言：未知
Star 数：65
技术要点
该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕This repository is my own list of tools / useful stuff for pentest, defensive activities, programming, lockpicking and physical security展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包，解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证，避免影响生产系统。
免责声明
本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。