XiaoliChan

wmiexec-Pro. New generation of wmiexec.py

wmiexec-RegOut. Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.

RedCaddy. C2 redirector base on caddy

zerologon-Shot. Zerologon exploit with restore DC password automatically

available-ipv6-hosts. IPv6 hosts

LDAPShell. A wrapper of ldap_shell.py module which in ntlmrelayx

CrackMapExec-Extension. CrackMapExec extension module/protocol support

Invoke-sAMSpoofing. CVE-2021-42287/CVE-2021-42278 exploits in powershell

winrm-PTH. Golang implement winrm client with pass the hash

BlackHat-Scrapy. BlackHat scrapy for download all the pdf file

PetitPotam-V2. More EFS coerced authentication method with PetitPotam.py

Fastjson-ForwardShell. Breaking fastjson with forward shell

Xiaoli-Tools. Python

WinRpcTest. 利用RPC服务，内网批量探测Windows出网

Redmi-AX6-Openwrt. Redmi-AX6 DumbAP firmware

helloworld.

Invoke-BloodHound. Simulate sharphound but coding in powershell...

PRET.go. Printer Exploitation Toolkit with golang

IPTV-stuff. CMCC IPTV sources update & convert tools

MSSQL_Stuff. Some scripts for microsoft SQL server in old version.

CrackMapExec-WMI. A standalone WMI protocol for CrackMapExec

CrackMapExec. A swiss army knife for pentesting networks

XiaoliChan.

NetExec. A swiss army knife for pentesting networks

NVNC-Assembly.load. The first open-source .NET VNC Server written entirely in the C# programming language.

cf. Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

synergy-core. Open source core of Synergy, the cross-platform keyboard and mouse sharing tool (Windows, macOS, Linux)

caddy-maxmind-geolocation. Caddy v2 module to filter requests based on source IP geolocation

termcolor. ANSI color formatting for output in terminal

RedCaddy-core. Fast and extensible multi-platform HTTP/3 web server with automatic HTTPS

impacket. Impacket is a collection of Python classes for working with network protocols.

unchain. Unchain all your devices from firewalls, bad networks, and internet regulations with a portable box

smsweb. 一个使用python编写的sms短信嗅探程序

ffuf. Fast web fuzzer written in Go

Coercer. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

hiding-cryptominers-linux-rootkit. Linux rootkit demostration to hide a cryptominer's process and CPU usage.

code-snippets. Various code snippets

bugshop.

xmrig_setup. Auto setup scripts and pre-compiled xmr miner for c3pool.com pool

certipy-merged. Tool for Active Directory Certificate Services enumeration and abuse

lesuo. 勒索病毒演示案例(Ransomware)

hbg_framework. HackTheBox Battlegrounds Framework from Cyber Mayhem Gameplay with Ippsec (https://youtu.be/o42dgCOBkRk)