
TitanHide
Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Linux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…

THorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.

Fully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)

The next level 100% Python obfuscator.

Permanently disable EDRs as local admin

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

ARM64 ELF Virtual Machine Protection System

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation


Generates anti-copy malware launchers using Process Ghosting to bypass AV/EDR signature scanning and prevent automatic sample submission. Supports…

A Runtime Crypter in C for Linux ELF binaries.

PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV…

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

PostShell - Post Exploitation Bind/Backconnect Shell

🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.