Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
rsmudge/malleable-c2-profilesMalleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles…
hasherezade/pe_to_shellcodeConverts PE into a shellcode
nil0x42/phpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
icex0/wp2shell-pocwp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
chvancooten/maldev-for-dummiesA workshop about Malware Development
tokyoneon/chimeraChimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
matterpreter/offensivecsharpCollection of Offensive C# Tooling
gloxec/crossc2generate CobaltStrike's cross-platform payload
screetsec/brutalPayload for teensy like a rubber ducky but the syntax is different. this Human interfaes device ( HID attacks ). Penetration With Teensy . Brutal is…
r00t-3xp10it/venomvenom - C2 shellcode generator/compiler/handler
boku7/bokuloaderA proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
r00ts3c/ddos-rootsecExplore RootSec's DDOS Archive, featuring top-tier scanners, powerful botnets (Mirai & QBot) and other variants, high-impact exploits, advanced…
outflanknl/evilclippyA cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis…
gosecure/pyrdpRDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
beigeworm/badusb-files-for-flipperzeroA Collection of Over 60 Scripts - updated specifically for the BadUSB function on the FlipperZero.
rosesecurity/anti-virus-evading-payloadsDuring the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…
tkmru/awesome-edr-bypassCurated collection of EDR bypass resources including PoCs, tools, workshops, presentations, and blogs for ethical hacking and red team operations.
i-am-jakoby/powershell-for-hackersThis repository is a collection of powershell functions every hacker should know
