Tools

x-3306/project-onyx

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

octoberfest7/dscourier_bof

BOF POC of the DSCourier project / invoking WinGet via COM

advanced-threat-research/netllix

A project created with an aim to emulate and test exfiltration of data over different network protocols.

artbitrage/stealth-kid-rat

Stealth Kid RAT (SKR) is an open-source multi-platform Remote Access Trojan (RAT) written in C#. Released under MIT license. The SKR project is fully…

immunityinc/log4j-jndiserver

This project will help to test the Log4j CVE-2021-44228 vulnerability.

subhdotsol/cve-2025-55182

This project provides a fully functional demonstration of CVE-2025-55182 (React2Shell) - a critical Remote Code Execution vulnerability in React…

9874621368/fog-project

FOG Project CVE-2024-39914 命令执行漏洞

malwaredllc/byob

An open-source post-exploitation framework for students, researchers and developers.

threatexpress/malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

darkr4y/geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

threatexpress/cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

ralfhacker/kerbeus-bof

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

sysdream/hershell

Hershell is a simple TCP reverse shell written in Go.

mazen160/shennina

Automating Host Exploitation with AI

trustedsec/tap

The TrustedSec Attack Platform is a reliable method for droppers on an infrastructure in order to ensure established connections to an organization.

4w4k3/insanity-framework

Generate Payloads and Control Remote Machines. [Discontinued]

huntoai/rdroid

[Android RAT] Remotely manage your android phone using PHP Interface

xm0kht4r/av-edr-killer

AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)