9.10. 操作系统持久化

HEXBLOG 42 0
广告

9.10.1. Windows

9.10.1.1. 凭证获取

  • mimikatz
  • RdpThief Extracting Clear Text Passwords from mstsc.exe using API Hooking
  • quarkspwdump Dump various types of Windows credentials without injecting in any process
  • SharpDump C# port of PowerSploit's Out-Minidump.ps1 functionality

9.10.1.2. 权限提升

  • WindowsExploits
  • GTFOBins Curated list of Unix binaries that can be exploited to bypass system security restrictions
  • JAWS Just Another Windows (Enum) Script

9.10.1.3. UAC Bypass

9.10.1.4. C2

  • Koadic is a Windows post-exploitation rootkit

9.10.1.5. 隐藏

  • ProcessHider Post-exploitation tool for hiding processes from monitoring applications

9.10.1.6. 综合工具

  • Nishang Offensive PowerShell for red team, penetration testing and offensive security

9.10.2. Linux

9.10.2.1. 权限提升

9.10.2.2. rootkit

9.10.2.3. 后门

  • prism is an user space stealth reverse shell backdoor

9.10.3. 综合

9.10.3.1. 凭证获取

  • sshLooterC program to steal passwords from ssh
  • keychaindump A proof-of-concept tool for reading OS X keychain passwords
  • LaZagne Credentials recovery project

9.10.3.2. 权限提升

  • BeRoot Privilege Escalation Project - Windows / Linux / Mac

9.10.3.3. RAT

9.10.3.4. C2

9.10.3.5. Cobalt Strike

9.10.3.6. 日志清除

  • Log killer Clear all logs in [linux/windows] servers

9.10.3.7. Botnet

  • byob Build Your Own Botnet

9.10.3.8. 免杀工具

  • AV Evasion Tool 掩日 - 免杀执行器生成工具
  • DKMC Dont kill my cat - Malicious payload evasion tool

发表评论 取消回复
表情 图片 链接 代码

分享