
OffensiveCpp
This repo contains C/C++ snippets that can be handy in specific offensive scenarios.

This repo contains C/C++ snippets that can be handy in specific offensive scenarios.

HookChain: A new perspective for Bypassing EDR Solutions

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by…

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vani…

An Open-Source Package for Textual Adversarial Attack.

Red Team K8S Adversary Emulation Based on kubectl

Standardized adversarial robustness benchmark with a public leaderboard and downloadable model zoo for evaluating ML models against Lp attacks and…

Bypass llm guardrails by confusing it with fabricated tool output.

AI / LLM Red Team Field Manual & Consultant’s Handbook

Lifetime AMSI bypass

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

Fully automatic censorship removal for language models

Compares Windows archiver support for Mark of the Web propagation, helping teams assess which tools preserve MOTW and mitigate macro-based malware…

Tools and PoCs for Windows syscall investigation.

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

C# Reflective loader for unmanaged binaries.

Signtool for expired certificates

Hands-on DEFCON workshop materials for killing and silencing EDR agents: lab setup, BYOVD, custom C/C++ evasion tooling, and reverse engineering.