Tools

c0axx/canaryhunter

Canary Hunter aims to be a quick PowerShell script to check for Common Canaries in various formats generated for free on canarytokens.org

r3drun3/magnet

Purple-team telemetry & simulation toolkit.

warpedatom/noisehound

Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers…

rasta-mouse/libtp

Crystal Palace library for proxying Nt API calls via the Threadpool

zarkones/bloodfangc2

Modern PIC implant for Windows (64 & 32 bit)

frkngksl/nimicstack

NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs

intelbroker/endurance-wiper

a small wiper malware programmed in c#

maldev-academy/drmbinviaordinalimports

Create Anti-Copy DRM Malware

soufianetahiri/teamsntlmleak

Leak NTLM via Website tab in teams via MS Office

frank2/blenny

A payload delivery system which embeds payloads in an executable's icon file!

s3cur3th1ssh1t/nimshellcodefluctuation

ShellcodeFluctuation PoC ported to Nim

anylnk/nsecsoftbyovd

NSecSoftBYOVD POC

didierstevens/falsepositives

Tools that trigger False Positive AV alerts

nccgroup/ml-for-rngs

Demonstrates using machine learning to predict random number generator sequences, highlighting cryptographic weaknesses through adversarial analysis.

knight0x07/poc-malware-ttps

PoC-Malware-TTPs

derrumbe/ruse

Mobile camera-based application that attempts to alter photos to preserve their utility to humans while making them unusable for facial recognition…

knoveleng/redeval

[ICLR 2026] - Official repo for the paper: "RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models"

ttpreport/siphondns

Covert data exfiltration via DNS