TimWhite

crawlergo_x_XRAY. 360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

Cobalt-Strike-Aggressor-Scripts. Cobalt Strike Aggressor 插件包

Doge-Gabh. GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

Doge-Loader. 🐶Cobalt Strike Shellcode Loader by Golang

Doge-XSS-Phishing. xss钓鱼，cna插件配合php后端收杆

rad-xray. xray+rad批量主动扫描

Frog-Auth. 🐸Unauthorized Detection Framework未授权访问检测框架

Frog-checkCDN. 批量检查目标是否为cdn

Frog-Fp. 🐸fingerprint detect framework 批量深度指纹识别框架

BinHol. Binary Hollowing

Doge-Assembly. Golang evasion tool, execute-assembly .Net file

Frog-Submon. 🐸Subdomain Monitor, 子域名监控

Doge-Defense-Evasion-Ref. Defense Evasion & Bypass AntiVirus reference

ReturnGate. ReturnGate, just like HellsGate.

killProcessPOC. use aswArPot.sys to kill process

Doge-sRDI. Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode

Doge-MemX. Golang implementation of Reflective load PE from memory

doge-getsys. An easy way to getsystem by golang.

Doge-CSBridge. CS http Dynamic Encrypt Bridge.

Doge-Persistence-Platform. 后渗透持久化控制平台; Windows Persistence Platform;

Spoofing-Gate. (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll

gobusterdns. lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具

Git-Daily. Github Security Daily Repository.

Doge-CLRLoad. load assembly executable file in memory

Bof2PIC. BOF/COFF obj file to PIC(shellcode). by golang

Doge-DumpMem. dump lsass

AddressOfEntryPoint-injection. x64 version

Doge-Hide. windows API to hide console window by golang

memmod. Fork & modify of Wireguard's Memmod

Doge-RecycledGate. Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;

Doge-Direct-Syscall. Golang Direct Syscall

about-anti-honeypot. 关于蜜罐的一些微小的统计工作

Doge-PX. DPX - the Doge Packer for eXecutables

Doge-AMSI-patch. golang amsi bypass

Doge-ScreenShot. desktop screenshot

Doge-SelfDelete. Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs

Doge-Process-Injection. Demo of process injection, using Nt, direct syscall, etc.

Doge-COFFLdr. Its a coff loader ported to go( Modified by TimWhite )

ScareCrow-Common. ScareCrow loader binary source which easier to read and learn

Doge-BlockDLLs. Preventing 3rd Party DLLs from Injecting into your Malware

iSliver. Learning notes of amazing Sliver C2 project.

Doge-newSyscall. use shellcode as asm function

Doge-AliveCheck. Use ICMP requests to check the alive subnet.

Doge-Whisper. golang implementation of Syswhisper2/Syswhisper3

CLR-RWX. Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间

Doge-RL. Reflective DLL injection Execution

Doge-EGGCall. Like Hell's Gate but more EGG :)

JmpUnhook. Ntdll Unhooking POC

find-subdomain-by-xray. 利用xray高级版批量收集子域名

Doge-AddSSP. Load ssp dll golang implementation

Doge-DNSptr. 通过ptr记录使用ip反查内网域名

Cobalt-Strike-det. Cobalt Strike teamserver detection.

unauthorized-check. 扫描常见未授权访问(改)（redis、mongodb、memcached、elasticsearch、zookeeper、ftp、CouchDB、docker、Hadoop）

Doge-Unhook. DLL Unhooking

Doge-HeapAlloc. Go

Doge-TypeUnhook. type ntdll.dll for dll unhooking

Doge-Obf. golang String Obfuscate

screencapture. D3D11 based screen sharing webserver via COM interop and IDXGIOutputDuplication

VEH-FuncObf. function call Obfuscator using veh hook