
sliver
Adversary Emulation Framework

Adversary Emulation Framework

Exploits the Windows Server 2025 dMSA privilege escalation vulnerability to enumerate writable OUs, escalate to arbitrary domain users, extract…

Hardware Breakpoint (DR0-DR7) based patch-less user-mode hooking & telemetry instrumentation engine (AMSI, WLDP & ETW PoC).

CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.

Project Mantis: Hacking Back the AI-Hacker; Prompt Injection as a Defense Against LLM-driven Cyberattacks

Practical black-box adversarial packet generation against encrypted traffic classification with minimal overhead and full packet recoverability.

Performing Indirect Clean Syscalls

NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs

A delicious, but malicious SSL-VPN server 🌮

PoCs and tools for investigation of Windows process execution techniques

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

Purple-team telemetry & simulation toolkit.

Attempt at Obfuscated version of SharpCollection

Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.

A high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of…

Adversary-resilient deep learning architecture for secure 5G indoor localization, combining CNN and multi-head attention to defend against signal…

Call stack spoofing for Rust

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.