qi4L

JYso. JNDIExploit or a ysoserial.

qscan. Lightning-fast internal network scanner

Unhooker-go. EDR绕过demo

CVE-2024-38077. RDL的堆溢出导致的RCE

Ysoserial-go. A Go library for generating Java deserialization payloads.

CallbackLoader-go. Callback Function Loader Implemented in Go

WeblogicScan-go. WeblogicScan一键检测

yongyouScan-go. 用友漏洞批量检测

Struts2Scan-go. 用golang实现的Struts2扫描工具

QVD-2023-13065. Nacos JRaft Hessian 反序列化 RCE EXP

Phant0m-go. kill windows log

monitor-Go. AWD 文件监控

seeyonerExp. 致远OA利用工具

JYso-skills. 用 AI 来操作JYso，并在AI遇到反序列化和JNDI注入情况自动调用

CVE-2023-25610. FortiOS 管理界面中的堆内存下溢导致远程代码执行

Blackout-go. kill AV/EDR

CVE-2026-31431-Container-Escape. CVE-2026-31431 容器逃逸

sRDI-rs. Rust 重构的 sRDI

GbitsGen. Black Hat Asia 2026 Ghost Bits payload 生成工具

Gabh-rs. 由 rust 重构的各类Gate技术

eBPFShell. Kernel shell

LSASSHijack. Loading a DLL into LSASS at boot, providing persistence.

Mangle. Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

ProcessHollowing. Suspend the process, inject/write the payload (PE mapping), and then resume the process.

SQL_injection_Bool. Python

NtRemoteLoad. Remote Shellcode Injector

qi4l.github.io. HTML

VEHPageHook. loader

qi4L.

win11. My Blog

sliver. Adversary Emulation Framework

ClashRules. Clash Verge 自用规则