
procrustes
A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering
Tools for extracting sensitive data from compromised systems without detection.

A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

Pillage filesystems for sensitive information with Go 🔍

Database Driven DNS Server with a Web UI

The SteaLinG is an open-source penetration testing framework designed for social engineering

A low pin count sniffer for ICEStick - targeting TPM chips

Twitter Intelligence OSINT project performs tracking and analysis of the Twitter

Academic purposes only. Attack against Salesforce lightning with guest privilege.

C# tool for red team operations that extracts contacts, mailbox metadata, and searches emails via Outlook COM object, with built-in Programmatic…

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

wxpath - declarative web crawling with XPath; a Web Query Language (WQL)

Steganograpy in Python | Hide files or data in Image Files

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

Injects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…

DLL Password Filter Implant with Exfiltration Capabilities

For importing, searching, and managing public password breach data

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

A simple utility to convert EXE files to JPEG images and vice versa.