
Shoggoth
Polymorphic encryptor that transforms shellcode, PE, and COFF files into obfuscated, position-independent payloads with RC4 and random block cipher…

Polymorphic encryptor that transforms shellcode, PE, and COFF files into obfuscated, position-independent payloads with RC4 and random block cipher…

Offensive security platform that automates attack surface discovery and vulnerability management

A tool that is used to hunt vulnerabilities in x64 WDM drivers

Evaluation framework for studying LLM agents that automatically generate working exploits from vulnerability reports, bypassing modern security…

** DISCONTINUED ** C2 framework that uses Background Intelligent Transfer Service (BITS) as communication protocol and Direct Syscalls + Dinvoke for…

Modular penetration testing platform that enables you to write, test, and execute exploit code.

An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far [FUD]

C# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

Automated ROP chain builder that extracts and analyzes gadgets from binaries using semantic queries, supporting X86/X64 architectures with a Python…

Stealthy DLL proxying implant for Microsoft Teams that injects AES-encrypted shellcode via unhooking techniques, providing persistent backdoor access…

That repository contains my updates to the well know java deserialization exploitation tool ysoserial.

Agentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.

Playbook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…

Repository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.

PAVELOW Exploit Toolbox is a BASH script that corresponds with your KALI distro to better help your vulnerability hunting and exploiting proccess…

A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (Draugr)

Exploit for CVE-2021-4034 (pkexec) that adds a root user with sudo privileges. Includes manual exploitation steps and compiles pwnkit.so for local…