#1Tools for bypassing Intrusion Detection and Prevention Systems (IDS/IPS) and network security controls.
Kitploit recommended

Windows RPC firewall that audits, detects, and blocks malicious remote procedure calls to prevent lateral movement, reconnaissance, and exploitation…
DejaVU - Open Source Deception Framework

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets.

AV/EDR Lab environment setup references to help in Malware development

Tool to deploy a post-exploitation prompt at any time

Trojanize your payload - WinRAR (SFX) automatization - under Linux distros

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

C++ shellcode injection technique using XOR encryption and UUID string conversion to bypass Windows Defender, with function call obfuscation and…

A high-performance port spoofing tool built in Rust. Confuse port scanners with dynamic service emulation across all ports. Features customizable…

psad: Intrusion Detection and Log Analysis with iptables

PwnSTAR (Pwn SofT-Ap scRipt) - for all your fake-AP needs!

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

Venom is a library that meant to perform evasive communication using stolen browser socket

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade…

Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X,…

This is a mini-firewall that completely isolates a target device from the local network.