
mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

C2 tool routing Cobalt Strike beacon data over LDAP user attributes for stealthy command-and-control in segmented networks.

Cobalt Strike extension for post-exploitation persistence using SharpStay .NET assembly. Provides GUI-driven persistence via Registry keys, Scheduled…

a lightweight, flexible and novel open source poc verification framework

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats.…

PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server (command & control and chat & communication server).…

Nim-based assembly packer and shellcode loader for opsec & profit

A simple shell code encryptor/decryptor/executor to bypass anti virus.

PE Crypter written in Nim

Cobalt Strike External C2 Integration With Azure Servicebus, C2 traffic via Azure Servicebus

Stealthy DLL proxying implant for Microsoft Teams that injects AES-encrypted shellcode via unhooking techniques, providing persistent backdoor access…

Automated network protocol scanner and exploiter leveraging Metasploit modules for rapid penetration testing across large networks, supporting SMB,…

Python library for low-level network protocol manipulation, featuring SMB, MSRPC, Kerberos, and WMI implementations with tools for authentication…

Automated ROP chain builder that extracts and analyzes gadgets from binaries using semantic queries, supporting X86/X64 architectures with a Python…

Wi-Fi Framework for creating proof-of-concepts, automated experiments, test suites, fuzzers, and more.

Automated ROP chain generator for x86-64 binaries using symbolic execution. Supports register/memory writes, function calls, syscalls, badchar…

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners…

Template-Driven AV/EDR Evasion Framework