This is your work, valued

guage

Expert
@howmp

半块西瓜皮

reality. grs内网穿透工具通过reality协议隐藏特征

618

WinDump. 后渗透信息/密码/凭证收集工具

305

iisproxy. 通过websocket在IIS8(Windows Server 2012)以上实现socks5代理

111

donut_ollvm. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

76

wget. 可能是windows最小的wget (862字节)

70

CobaltStrikeDetect. CobaltStrikeDetect

50

COMFinder. IDA plugin for COM

48

zigdonut. 用zig实现精简版的donut,可将exe/dll/elf转换为shellcode

20

zigshellcode. Zig

18

pyminhook. MinHook warp of Python

12

zigxorstr. zig compile time string encryption

11

WinINetLogger. WinINetLogger

6

BeaconKiller. 一个通过etw技术查杀Cobalt Strike (http/https)Beacon的工具

5

LdrpHandleTlsData. 定位ntdll.dll中LdrpHandleTlsData地址

4

MFCFinder. 静态获取MFC的MESSAGE_MAP表

2

pcre_static_cgo. static link pcre for golang,support window/linux

2

whatssl. 识别客户端是否使用OpenSSL

1