
MAD-CAT
MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks against multiple…

MAD-CAT (Meow Attack Data Corruption Automation Tool) is a comprehensive security tool designed to simulate data corruption attacks against multiple…

Printer exploitation framework for security testing via raw port 9100, featuring PCL payload delivery, DoS bombing, C2 QR codes, phishing QR codes,…

Scans PostgreSQL databases and Jira issues for PII using regex, NER/ML, and optional self-hosted LLM detection, with redacted reports and audit…

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Red Team tool for covert file exfiltration via Bluetooth audio transmission, encoding binary data into FLAC signals to bypass EDR, XDR, and DLP…

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration…

Adversary Emulation Framework

Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐

Pillage filesystems for sensitive information with Go 🔍

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

More examples using the Impacket library designed for learning purposes.

iOS Shortcut-based keylogger designed to capture keystrokes and exfiltrate data from compromised devices.

Transfer files to and from a Windows host via ICMP in restricted network environments.

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

Web-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search