Tools

mindcrypt/covertchannels-steganography

A list of covert channels and steganography/steganalysis resources (books, papers & tools)

trustedsec/sliverkeylogger

Windows keylogging module for the Sliver C2 implant framework, using Raw Input to capture keystrokes and expose start, stop, and retrieval commands…

ceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

george0papasotiriou/cve-2026-21002-serverless-cold-start-credential-leakage-via-reused-tmp

PoC exploit for CVE-2026-21002 serverless cold-start credential leakage, demonstrating how reused Lambda /tmp directories expose AWS secrets to other…

pentestpartners/ptp-rat

Exfiltrate data over screen interfaces

randomrobbiebf/learning-management-system

Masteriyo - LMS for WordPress <= 1.6.7 - Sensitive Information Exposure

spiralbl0ck/linux-kernel-infoleak-6.12.-leveraged-to-do-cross-container-info-leak.-

POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20

nopn0p/xzf

EXIF-based command and control PoC

hannob/cve-2020-27603-bbb-libreoffice-poc

Proof of Concept of Libreoffice file exfiltration vulnerability in Big Blue Button

quinnbast/malicious-mcp

A Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...

h9zdev/geosentinel

Real-time geospatial OSINT platform aggregating flight, vessel, and satellite data with dark web search, social media dorking, and AI-powered…

danielmiessler/egression

Test a network's egress controls with various levels of success and failure.

bluepigeonproject/blue-pigeon

Blue Pigeon is a Bluetooth-based data exfiltration and proxy tool to enable communication between a remote Command and Control (C2) server and a…

nyan-x-cat/lime-rat

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)