Awesome

所有收集类项目

Persistence

跟驻留/持久化有关的工具和文章，多平台。包括80个工具和350左右文章。
English Version

<a id="778ee28406147330e50ce8e39e1e0510"></a>Windows

<a id="a563fd944f51033ab1823cc51ce5cc84"></a>工具

[336星][4m] [C#] fireeye/sharpersist Windows persistence toolkit
[107星][12m] [PS] r4wd3r/rid-hijacking Windows RID Hijacking persistence technique
[98星][5y] [PS] enigma0x3/invoke-altdsbackdoor obtain persistence on a Windows 7+ machine under both Standard and Administrative accounts by using two Alternate Data Streams
[66星][3y] [Py] darkquasar/wmi_persistence Python脚本，直接解析 OBJECTS.DATA 文件（无需访问用户WMI 名称空间）查找 WMI persistence
[60星][2m] [Go] giuliocomi/backoori Tool aided persistence via Windows URI schemes abuse
[17星][8m] [Go] mthbernardes/badarchitect Abusing SketchUp to make persistence on Windows
[6星][4m] [C] 1captainnemo1/persistentcreverseshell A PERSISTENT FUD Backdoor ReverseShell coded in C for any Windows distro, that will make itself persistent on every BOOT and fire a decoy app in the foreground while connecting back to the attacker machine as a silent background process , spawning a POWERSHELL on the attacker machine.
[5星][4m] [C++] rtcrowley/offensive-netsh-helper Maintain Windows Persistence with an evil Netshell Helper DLL

<a id="9473a67a0be440ab564685f35d01322b"></a>文章

<a id="d85c33dfafdf2941e8865e38d7abdc70"></a>Linux

<a id="3fff7861fe9a68d96798413b150bf775"></a>工具

[433星][4m] [Shell] d4rk007/redghost 用bash编写的Linux后渗透框架，旨在帮助red团队进行持久性、侦察、特权升级和不留痕迹

<a id="edadf03a82a99fb2d7bfda27c4d320d4"></a>文章

<a id="92795e827b3b796c276aeb42cd7ba7bc"></a>macOS

<a id="920d31fa243672149cb4b16f6bd5c43c"></a>文章

<a id="96c32cb67d39a39ca6ebcbf437ad5be0"></a>Android

<a id="6f8c8181aaceb3707bf31e05ef01aff7"></a>工具

[33星][12m] [Kotlin] cesarferreira/seguro Secure persistence using AES+CBC encryption on Android with no dependencies.
[31星][6m] [Kotlin] irontec/android-room-example Android Kotlin app showcasing the Room persistence library

<a id="0c8cc0e282af1c3976f089a32f0490ef"></a>文章

<a id="f2fca029044e3c784f5b8fedc992ade4"></a>iOS

<a id="11669583787f71136e12da932d6e60b6"></a>工具

[199星][6m] [Swift] lucas34/swiftqueue Job Scheduler for IOS with Concurrent run, failure/retry, persistence, repeat, delay and more
[138星][7m] [Swift] justeat/justpersist JustPersist is the easiest and safest way to do persistence on iOS with Core Data support out of the box. It also allows you to migrate to any other persistence framework with minimal effort.

<a id="79422f0e817849c95cc8b24650f95d94"></a>文章

<a id="1006e9d79182efe6f1cb25f4da74e7e1"></a>新添加

<a id="f14b1b535106867820036c96a82f55ed"></a>工具

[1742星][5m] [Py] rootm0s/winpwnage UAC绕过、提升、持久化和执行方法
[986星][26d] [Py] synack/knockknock displays persistent items (scripts, commands, binaries, etc.), that are set to execute automatically on OS X
[983星][3y] [C] cybellum/doubleagent Zero-Day Code Injection and Persistence Technique
[792星][17d] [C] pmem/pmdk a collection of libraries and tools for System Administrators and Application Developers to simplify managing and accessing persistent memory devices
[538星][4y] [PS] enigma0x3/generate-macro This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.
[347星][1m] [TeX] plailect/keyshuffling Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain
[310星][22d] [Py] shaypal5/cachier Persistent, stale-free, local and cross-machine caching for Python functions.
[266星][2y] [C++] ewhitehats/invisiblepersistence Persisting in the Windows registry "invisibly"
[220星][5y] [PS] jseidl/babadook Connection-less Powershell Persistent and Resilient Backdoor
[215星][10m] [PS] harmj0y/damp The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification
[194星][10m] [Ruby] sfeley/candy Transparent persistence for MongoDB
[192星][2m] [Py] scrapy/queuelib Collection of persistent (disk-based) queues
[162星][3y] miserlou/mackenzie AWS Lambda Infection Toolkit // Persistent Lambda Malware PoC
[152星][1y] [ObjC] objective-see/reikey Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!
[150星][20d] [Py] checkymander/imessagesbackdoor A script to help set up an event handler in order to install a persistent backdoor that can be activated by sending a message.
[141星][6m] [C++] hasherezade/iat_patcher Persistent IAT hooking application - based on bearparser
[126星][2y] zonksec/persistence-aggressor-script initial commit
[124星][4m] [PS] p0w3rsh3ll/autoruns help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
[111星][4m] [Go] schollz/linkcrawler Cross-platform persistent and distributed web crawler
[105星][3y] [Py] n00py/norknork Powershell Empire Persistence finder
[99星][2y] [PS] testingpens/malwarepersistencescripts A collection of scripts I've written to help red and blue teams with malware persistence techniques.
[95星][23d] [Batchfile] huntresslabs/evading-autoruns 几种用于逃避常见的驻留枚举工具的技术（Evading Autoruns，Derbycon 2017）
[94星][22d] [C++] hasherezade/persistence_demos Demos of various (also non standard) persistence methods used by malware
[91星][4m] 0xthirteen/staykit Cobalt Strike kit for Persistence
[73星][4m] [Py] s1egesystems/ghostdelivery .vbs script to deliver payload with persistence.
[70星][16d] [C#] mdsecactivebreach/wmipersistence WMI Event Subscription Persistence in C#
[69星][4m] [C++] tobozo/esp32-blecollector ᛡᛒ BLE Scanner + Data persistence on SD Card for M5Stack, Odroid-Go, ESP32-Wrover-Kit and other models
[66星][30d] yeti-791/apt-guide APT学习指南（Advanced persistent threat learning Guide）
[64星][5y] [PS] enigma0x3/outlookpersistence
[64星][1m] [Py] n00py/post-ex Post-exploitation scripts for OS X persistence and privesc
[61星][1m] 3gstudent/bitsadminexec 利用bitsadmin 实现驻留，以及自动运行
[61星][1y] [JS] dxa4481/xssoauthpersistence Maintaining account persistence via XSS and Oauth
[58星][4y] [PS] killswitch-gui/persistence-survivability Powershell Persistence Locator
[49星][1m] [Go] schollz/crawdad Cross-platform persistent and distributed web crawler
[40星][3y] [PS] n0pe-sled/wmi-persistence
[39星][22d] [C] pmem/valgrind Enhanced Valgrind for Persistent Memory
[38星][1y] [C] ntraiseharderror/kaiser Fileless persistence, attacks and anti-forensic capabilties.
[35星][2y] [PS] 3gstudent/office-persistence Use powershell to test Office-based persistence methods
[34星][3y] [PS] 3gstudent/waitfor-persistence Use Waitfor.exe to maintain persistence
[33星][3m] tom4t0/cobalt-strike-persistence cobalt strike 自启动脚本
[30星][3y] [PS] 3gstudent/com-object-hijacking use COM Object hijacking to maintain persistence.(Hijack CAccPropServicesClass and MMDeviceEnumerator)
[30星][10m] [PHP] echo-devim/xbackdoor A tool for the persistent XSS exploitation with a focus for mobile web browsers
[29星][20d] [PHP] n1215/lara-todo-persistence LaravelとEloquentの永続化パターンサンプル
[29星][7m] [PS] ahhh/wifi_trojans A collection of wireless based bind and reverse connect shells for penetration testers to use in demonstrating persistence to a network via rouge access points.
[29星][4m] [Py] rikvanduijn/wmi-persistence
[27星][5m] [Py] threatresponse/mad-king Proof of Concept Zappa Based AWS Persistence and Attack Platform
[25星][2y] [Py] catalyst256/netscaler-cookie-decryptor Python application to decrypt Netscaler Load Balancer Persistence Cookies
[21星][4m] [Shell] rustybird/qubes-split-browser Tor Browser in a Qubes DisposableVM, with persistent bookmarks and login credentials
[20星][26d] karneades/malware-persistence Collection of malware persistence and hunting information. Be a persistent persistence hunter!
[19星][5y] [Visual Basic .NET] enigma0x3/old-powershell-payload-excel-delivery This version touches disk for registry persistence.
[15星][2y] [Py] nullarray/shellware Persistent bind shell via pythonic shellcode execution, and registry tampering.
[14星][6m] [HTML] abzcoding/aptdetector Advanced Persistent Threat Detection Using Network Analysis
[14星][19d] [C] windriver-opensourcelabs/cryptfs-tpm2 Store and restore a persistent passphrase with TPM 2.0
[8星][4m] [PS] bspence7337/invoke-wmipersist A powershell script to create WMI Event subscription persistence
[7星][1y] [Java] tryan18/xcom Cross-referencing network communication for detecting Advanced Persistent Threat (APT) malware
[4星][2y] pradeepjairamani/typo3-xss-poc Typo3 -v9.1.0 Persistent Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-6905
[3星][4y] [JS] tobypinder/ludumdare32 [Merged into /tobypinder] Apt - Advanced Persistent Threat
[2星][2y] [Py] aroradhruv03/apthreatdetectionsys Advanced Persistent Threat /Intrusion Detection Sys
[2星][9m] [Py] azmatt/cerebro Keyword Persistent Monitor
[2星][3y] [JS] adrienjoly/persistent-harmony A wrapper class to create persistent javascript objects, relying on harmony proxies.
[1星][1y] harsh2602/apt-detection-via-graph-analytics This is a public repo for the Graph Analytics project done for the Advanced and Persistent Threats (CS 594-III) during Spring Semester for 2016
[1星][1y] security-breachlock/cve-2018-16639 Non-Persistent XSS in Typesetter CMS
[1星][2y] [PS] subesp0x10/wmi-persistence
[0星][1y] security-breachlock/cve-2018-16623 XSS Persistent in Kirby CMS
[0星][1y] security-breachlock/cve-2018-16632 Persistent Cross site Scripting in Mezzanine
[0星][1y] security-breachlock/cve-2018-17301 Non-persistent XSS in EspoCRM
[None星][ObjC] objective-see/blockblock BlockBlock provides continual protection by monitoring persistence locations.

<a id="426ad781ce4166338e198a70e025885d"></a>文章

<a id="e63f08b4b1c54539573027e192270441"></a>文章-pentestlab

<a id="396a097eb8cc253fd43f518f1ea43168"></a>文章-恶意代码

<a id="91f798eff3ccabbbb76ab957994aec46"></a>文章-hackingarticles

贡献

内容为系统自动导出, 有任何问题请提issue

Awesome

所有收集类项目

Persistence

目录

<a id="778ee28406147330e50ce8e39e1e0510"></a>Windows

<a id="a563fd944f51033ab1823cc51ce5cc84"></a>工具

<a id="9473a67a0be440ab564685f35d01322b"></a>文章

<a id="d85c33dfafdf2941e8865e38d7abdc70"></a>Linux

<a id="3fff7861fe9a68d96798413b150bf775"></a>工具

<a id="edadf03a82a99fb2d7bfda27c4d320d4"></a>文章

<a id="92795e827b3b796c276aeb42cd7ba7bc"></a>macOS

<a id="920d31fa243672149cb4b16f6bd5c43c"></a>文章

<a id="96c32cb67d39a39ca6ebcbf437ad5be0"></a>Android

<a id="6f8c8181aaceb3707bf31e05ef01aff7"></a>工具

<a id="0c8cc0e282af1c3976f089a32f0490ef"></a>文章

<a id="f2fca029044e3c784f5b8fedc992ade4"></a>iOS

<a id="11669583787f71136e12da932d6e60b6"></a>工具

<a id="79422f0e817849c95cc8b24650f95d94"></a>文章

<a id="1006e9d79182efe6f1cb25f4da74e7e1"></a>新添加

<a id="f14b1b535106867820036c96a82f55ed"></a>工具

<a id="426ad781ce4166338e198a70e025885d"></a>文章

<a id="e63f08b4b1c54539573027e192270441"></a>文章-pentestlab

<a id="396a097eb8cc253fd43f518f1ea43168"></a>文章-恶意代码

<a id="91f798eff3ccabbbb76ab957994aec46"></a>文章-hackingarticles

贡献