#1Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
Kitploit recommended
ariary/fileless-xecStealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)
igh0st/gh0st3.6_srcRemote Access Trojan (RAT) source code for learning C2 communication, payload delivery, and post-exploitation techniques in Windows environments.
vysecurity/cve-2017-8759CVE-2017-8759 - A vulnerability in the SOAP WDSL parser.
getrektboy724/betterxencryptA better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.
maldev-academy/maldevacademyldr.2RunPE implementation with multiple evasive techniques (2)
maldev-academy/christmasPoC demonstrating a multi process injection chain aimed at remotely executing shellcode
iilegacyyii/shellcryptA QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods.
petitoto/chromium-exploit-devToolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits
lloydlabs/wsb-detectwsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")
blacksnufkin/novaldrThreadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
risksense-ops/cve-2016-6366Public repository for improvements to the EXTRABACON exploit
codesiddhant/jasmin-ransomwareJasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to…
kozmic/laravel-poc-cve-2018-15133PoC for CVE-2018-15133 (Laravel unserialize vulnerability)
octoberfest7/zip_smugglingPython3 utility for creating zip files that smuggle additional data for later extraction
kleiton0x00/shelltropyA technique of hiding malicious shellcode via Shannon encoding.
gpoulios/ropinjectorPatching ROP-encoded shellcodes into PEs
connormcgarr/littlecorporalLittleCorporal: A C# Automated Maldoc Generator
kudaes/splitApply a divide and conquer approach to bypass EDRs
