
ATTACK-Tools
SQLite relational data model for MITRE ATT&CK plus an adversary emulation planning tool, enriched with Red Canary ATOMIC tests and APT3 emulation…

SQLite relational data model for MITRE ATT&CK plus an adversary emulation planning tool, enriched with Red Canary ATOMIC tests and APT3 emulation…

C++ tool using libtins to craft and broadcast DHCP requests with random MACs across an IP pool, exhausting DHCP leases to demonstrate DHCP starvation…

Benchmark harness measuring where prompt injection defenses fire in tool-using LLM agent pipelines, tracking canary tokens across exposed, persisted,…

Adversarial image perturbation tool that uses SAM segmentation and CLIP models to evade AI-based scam image classifiers for security research.

Experiments for control-token chain-of-thought suppression and parser-leniency attacks on tool-using LLM agents

Research code and experiments for defending tool-integrated LLM agents against adversarial attacks, extending Agent Security Bench with new defense…

Bypass llm guardrails by confusing it with fabricated tool output.

C# Reflective loader for unmanaged binaries.

Clusters and elements to attach to MISP events or attributes (like threat actors)

Open-source framework for red-teaming generative AI systems: automate attack prompts, score model responses, and audit behavior to identify security…

A font-based deception tool for red teaming, security research, and whatever else.

Tools and PoCs for Windows syscall investigation.

Stop Windows Defender programmatically

A windows token impersonation tool

A tool to find folders excluded from AV real-time scanning using a time oracle

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…

A payload delivery system which embeds payloads in an executable's icon file!

C# obfuscator that bypass windows defender