Payload Development

trustedsec/cs-remote-ops-bof

Remote operations commands implemented using Beacon Object Files

knownsec/pocsuite

This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.

outflanknl/c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

vxunderground/vxug-papers

Research code & papers from members of vx-underground.

msanft/cve-2025-55182

Explanation and full RCE PoC for CVE-2025-55182

nytrorst/shellcodecompiler

Shellcode Compiler

busung-dev/root-my-galaxy

KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499

ne0nd0g/go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

s3cur3th1ssh1t/offensivevba

This repo covers some code execution and AV Evasion methods for Macros in Office documents

r00t-3xp10it/fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

med0x2e/sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

7etsuo/windows-api-function-cheatsheets

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

0vercl0k/rp

Fast C++ ROP gadget finder for PE/ELF/Mach-O binaries across x86/x64/ARM/ARM64 architectures, enabling efficient return-oriented programming chain…

cr4sh/s6_pcie_microblaze

PCI Express DIY hacking toolkit for Xilinx SP605. This repository is also home of Hyper-V Backdoor and Boot Backdoor, check readme for links and info

reverseclabs/c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive…

cobbr/sharpsploit

SharpSploit is a .NET post-exploitation library written in C#

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features