
TitanHide
Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Windows kernel driver designed for terminating specific processes on a system

The next level 100% Python obfuscator.

This is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools…

Redirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…

Permanently disable EDRs as local admin

THorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

A Runtime Crypter in C for Linux ELF binaries.

🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.

ARM64 ELF Virtual Machine Protection System

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV…

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

Linux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…


PostShell - Post Exploitation Bind/Backconnect Shell