AtomicSyscall
daem0nc0re/atomicsyscallTools and PoCs for Windows syscall investigation.
adversarial-attackbinary-analysiseducation+3
365
daem0nc0re/atomicsyscallTools and PoCs for Windows syscall investigation.
sensepost/impersonateWindows token impersonation tool to list tokens, execute commands as impersonated users, and add domain admin users during Active Directory pentests.
uber-common/mettaAn information security preparedness tool to do adversarial simulation.
netero1010/edrsilencerA tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
med0x2e/gadgettojscriptA tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…
mvelazc0/purplesharpC# adversary simulation tool executing 47+ MITRE ATT&CK techniques in Windows Active Directory environments to generate attack telemetry for…
twosevenonet/wsassThis is the tool to dump the LSASS process on modern Windows 11
doctoreww/evilfonttoolA font-based deception tool for red teaming, security research, and whatever else.
bishopfox/deephackProof-of-concept tool for generating adversarial perturbations to exploit weaknesses in deep learning models, based on DEF CON 25 presentation.
vectra-ai-research/maad-afMAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).
sbasu7241/aws-threat-simulation-and-detectionPlaying around with Stratus Red Team (Cloud Attack simulation tool) and SumoLogic
telefonica/attpwnAdversary emulation tool for Windows that executes MITRE ATT&CK techniques via PowerShell to simulate real threats, test defenses, and validate…
bananabr/timeexceptionA tool to find folders excluded from AV real-time scanning using a time oracle
bishopfox/brokenhillA productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)
zjuicsr/deeptrapSecurity benchmark for evaluating OpenClaw agents against adversarial execution contexts including poisoned files, injected skills, misleading tool…
asset-group/ghostspliceProof-of-concept demonstrating cross-channel trust fragmentation attacks on MCP-based AI coding assistants, splitting malicious instructions across…
canonicalmg/reverse-captcha-evalEvaluation framework that tests whether large language models follow invisible Unicode-encoded instructions embedded in normal-looking text, with…
dtrecherel/dnsspoofPython3 tool for DNS spoofing attacks. Sniffs network, intercepts DNS queries, and sends forged responses to redirect victims to a specified IP.