bluscreenofjeff/malleable-c2-randomizerA script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls
samyk/quickjackQuickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.
sech0us3/waf-checkerAutomated WAF assessment tool that detects firewall vendors, tests 19 attack categories with advanced evasion payloads, and provides color-coded…
g4lb1t/pstf2Passive Security Tools Fingerprinting Framework
dereeqw/blackberryc2Encrypted command‑and‑control (C2) research framework for cybersecurity education, red team labs, and secure client‑server communication experiments.
simoesctt/ctt-exchange-rce-v1.0---microsoft-exchange-exploit-cvss-10.0-critical-cve-2021-26855-cve-2021-27065CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell/ProxyLogon), another CVSS 10.0 critical vulnerability that…
abdurahmon3236/-cve-2024-6095Obfuscated CVE-2024-6095 exploit script that uses random strings, advanced payloads, custom headers, and randomized delays to evade detection during…
getrektboy724/meterpwrshellAutomated Tool That Generates The Perfect Meterpreter Powershell Payload
phra/pezorPack shellcode and PE executables into evasive payloads with anti-debug, unhooking, syscall, and memory fluctuation techniques for red-team…
0xsp-srd/mortarevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
mgeeky/stracciatellaOpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup
hwbp/lazyhookEvade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.
mgeeky/redwardenCobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
ayoubfaouzi/al-khaserPublic malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
waelmas/frameless-bitbA new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login…
infobyte/spoilerwallSpoilerwall introduces a brand new concept in the field of network hardening. Avoid being scanned by spoiling movies on all your ports!
alperenugurlu/nac_bypass_agentThis function combines all the above functions and takes necessary information from the user to change the IP and MAC address, start the responder…
flamingspork/iptable_evilKernel-level iptables backdoor that accepts all packets with the RFC 3514 evil bit set, bypassing firewall rules. Includes in-tree and out-of-tree…
