一个可以伪装上线Cobaltstrike的脚本
rootless chroot jails inside dynos
sudo almost as fake as your ma
A very very stupid fake sudo,using polkit pkexec to grant permissions.It can partly replace sudo in most common scenarios.
User study for fakes prototype
Defanged version of sunburst backdoor
A simple Google AppEngine application to provide an API endpoint for subway systems that don't have one of their own