
emp3r0r
Linux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…

Linux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…

Master the art of cloud exploitation. A specialized resource for offensive security researchers and red teamers focused on weaponizing…

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

Creation of multiple Malware tools consisting of evasion, enumeration and exploitation

PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV…

Windows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…

Redirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…

ARM64 ELF Virtual Machine Protection System

A Runtime Crypter in C for Linux ELF binaries.

🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.

Permanently disable EDRs as local admin

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on…

Windows kernel driver designed for terminating specific processes on a system

THorse is a RAT (Remote Administrator Trojan) Generator for Windows/Linux systems written in Python 3.

Fully undetected grabber (grabs wallets, passwords, cookies, modifies discord client etc.)

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

The next level 100% Python obfuscator.