使用 @0xcc00 开发的 yetAnotherObfuscator,结合常见 C# 攻击性工具的全新构建,以 CDI(持续部署与集成)方式通过 Azure DevOps 发布管道,对自动化混淆进行的一次快速而粗糙的尝试。
Obfuscated SharpCollection 并不打算像原始 SharpCollection 仓库那样完整。Obfuscated SharpCollection 仅包含经过混淆的 NetFramework 4.7 ANY_CPU 编译二进制文件
每天晚上 03:00,Azure DevOps 管道会检查所有仓库 master 分支的新提交。包含更改的分支将被自动拉取,并使用不同的框架目标和架构进行编译,然后推送到本仓库。
管道可在以下位置找到: https://dev.azure.com/FlangvikDev/SharpRelease
我是否应该在真实项目中盲目部署这些二进制文件?
绝对不行,始终仔细检查你部署到客户机器或网络上的任何内容。例如 https://github.com/dnSpy/dnSpy
从本仓库盲目部署任何内容应仅限于实验室环境、虚拟机、HTB、检测映射等场景。
| 工具 \ .NET Framework | NET 4.0 | NET 4.5 | NET 4.7 |
|---|---|---|---|
| ADCollector | ✔️ | ✔️ | ✔️ |
| ADCSPwn | ✔️ | ✔️ | ✔️ |
| ADSearch | ❌ | ❌ | ✔️ |
| ADFSDump | ✔️ | ✔️ | ✔️ |
| AtYourService | ✔️ | ✔️ | ✔️ |
| BetterSafetyKatz | ✔️ | ✔️ | ✔️ |
| Certify | ✔️ | ✔️ | ✔️ |
| EDD | ✔️ | ✔️ | ✔️ |
| ForgeCert | ❌ | ✔️ | ✔️ |
| DeployPrinterNightmare | ✔️ | ✔️ | ✔️ |
| Grouper2 | ✔️ | ✔️ | ✔️ |
| Group3r | ❌ | ✔️ | ✔️ |
| KrbRelay | ❌ | ❌ | ✔️ |
| KrbRelayUp | ❌ | ❌ | ✔️ |
| InveighZero | ✔️ | ✔️ | ✔️ |
| LockLess | ✔️ | ✔️ | ✔️ |
| PassTheCert | ✔️ | ✔️ | ✔️ |
| PurpleSharp | ❌ | ✔️ | ✔️ |
| Rubeus | ✔️ | ✔️ | ✔️ |
| SafetyKatz | ✔️ | ✔️ | ✔️ |
| SauronEye | ❌ | ❌ | ✔️ |
| scout | ✔️ | ✔️ | ✔️ |
| SearchOutlook | ✔️ | ✔️ | ✔️ |
| Seatbelt | ✔️ | ✔️ | ✔️ |
| Sharp-SMBExec | ✔️ | ✔️ | ✔️ |
| SharpAllowedToAct | ✔️ | ✔️ | ✔️ |
| SharpAppLocker | ❌ | ✔️ | ✔️ |
| SharpBlock | ✔️ | ✔️ | ✔️ |
| SharpBypassUAC | ✔️ | ✔️ | ✔️ |
| SharpChisel | ✔️ | ✔️ | ✔️ |
| SharpChrome | ✔️ | ✔️ | ✔️ |
| SharpChromium | ✔️ | ✔️ | ✔️ |
| SharpCloud | ✔️ | ✔️ | ✔️ |
| SharpCOM | ✔️ | ✔️ | ✔️ |
| SharpCrashEventLog | ✔️ | ✔️ | ✔️ |
| SharpDir | ✔️ | ✔️ | ✔️ |
| SharpDoor | ✔️ | ✔️ | ✔️ |
| SharpDPAPI | ✔️ | ✔️ | ✔️ |
| SharpDump | ✔️ | ✔️ | ✔️ |
| SharpEDRChecker | ✔️ | ✔️ | ✔️ |
| SharpExec | ✔️ | ✔️ | ✔️ |
| SharPersist | ✔️ | ✔️ | ✔️ |
| SharpFiles | ✔️ | ✔️ | ✔️ |
| SharpGPOAbuse | ✔️ | ✔️ | ✔️ |
| SharpHandler | ✔️ | ✔️ | ✔️ |
| SharpHose | ❌ | ✔️ | ✔️ |
| SharpHound | ❌ | ❌ | ✔️ |
| SharpKatz | ✔️ | ✔️ | ✔️ |
| SharpLaps | ✔️ | ✔️ | ✔️ |
| SharpMapExec | ✔️ | ✔️ | ✔️ |
| SharpMiniDump | ✔️ | ✔️ | ✔️ |
| SharpMove | ✔️ | ✔️ | ✔️ |
| SharpPrinter | ❌ | ✔️ | ✔️ |
| SharpNoPSExec | ❌ | ❌ | ✔️ |
| SharpRDP | ❌ | ✔️ | ✔️ |
| SharpReg | ✔️ | ✔️ | ✔️ |
| SharpSCCM | ❌ | ❌ | ✔️ |
| SharpSecDump | ✔️ | ✔️ | ✔️ |
| SharpShares | ✔️ | ✔️ | ✔️ |
| SharpSphere | ❌ | ✔️ | ✔️ |
| SharpSpray | ✔️ | ✔️ | ✔️ |
| SharpStay | ✔️ | ✔️ | ✔️ |
| SharpSvc | ❌ | ❌ | ✔️ |
| SharpSniper | ✔️ | ✔️ | ✔️ |
| SharpSQLPwn | ✔️ | ✔️ | ✔️ |
| SharpTask | ✔️ | ✔️ | ✔️ |
| SharpUp | ✔️ | ✔️ | ✔️ |
| SharpView | ❌ | ✔️ | ✔️ |
| SharpWMI | ✔️ | ✔️ | ✔️ |
| SharpWebServer | ✔️ | ✔️ | ✔️ |
| SharpWifiGrabber | ✔️ | ✔️ | ✔️ |
| SharpZeroLogon | ✔️ | ✔️ | ✔️ |
| Shhmon | ✔️ | ✔️ | ✔️ |
| Snaffler | ❌ | ✔️ | ✔️ |
| SqlClient | ✔️ | ✔️ | ✔️ |
| StandIn | ✔️ | ✔️ | ✔️ |
| StickyNotesExtract | ✔️ | ✔️ | ✔️ |
| SweetPotato | ❌ | ✔️ | ✔️ |
| ThunderFox | ✔️ | ✔️ | ✔️ |
| TruffleSnout | ❌ | ✔️ | ✔️ |
| TokenStomp | ✔️ | ✔️ | ✔️ |
| Watson | ✔️ | ✔️ | ✔️ |
| winPEAS | ❌ | ✔️ | ✔️ |
| WMIReg | ✔️ | ✔️ | ✔️ |
| Whisker | ❌ | ❌ | ✔️ |
| 以下列出了所有这些出色工具的链接::) | |||
| 标题 | |||
| @leechristensen |