secret_handshake
jconwell/secret_handshakeA prototype malware C2 channel using x509 certificates over mTLS
command-and-controldata-exfiltrationids-ips-evasion+1
153
jconwell/secret_handshakeA prototype malware C2 channel using x509 certificates over mTLS
krixx1337/burner-netZero-trust anti-forensic HTTP client. Wipes secrets. Severs traces. CPR in a Stealth Tank. 👻
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
zer0yu/awesome-cobaltstrikeCurated collection of Cobalt Strike resources covering C2 profiles, BOFs, Aggressor scripts, evasion techniques, detection guides, and red team…
blacksnufkin/byovdCollection of BYOVD proof-of-concept exploits that abuse vulnerable Windows kernel drivers to disable AV/EDR, with driver reverse engineering…
matro7sh/bypassavThis map lists the essential techniques to bypass anti-virus and EDR
bc-security/beginners-guide-to-obfuscationHands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…
an0nud4y/evilginx-phishing-infra-setupEvilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs
waelmas/frameless-bitbA new approach to Browser In The Browser (BITB) without the use of iframes, allowing the bypass of traditional framebusters implemented by login…
noahoksuz/osripperAV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
yo-yo-yo-jbo/macos_app_structureEducational deep dive into macOS app bundles, plist files, and launchd process behavior, with offensive security notes on packaging payloads as .app…
kouf320/docker-lab-cve-2017-5638-cve-2021-41773Docker-based multi-stage attack emulation lab demonstrating CVE-2017-5638 and CVE-2021-41773 exploitation, lateral movement, and Suricata IDS…
elpy1/ubercookieEducational evercookie demo showing how browser storage and HTTP cache techniques can persistently re-identify a visitor.
cucadili/cve-2017-3066Analysis and exploitation of CVE-2017-3066, a Java deserialization RCE in Adobe ColdFusion's BlazeDS library, with Suricata detection rules and…
bhatbhupendra/moniker-link--cve-2024-21413-Educational guide on CVE-2024-21413, the Outlook zero-click Moniker Link vulnerability, covering attack flow, NTLM credential capture, detection with…
dominic471/qub-network-security-cve-2023-20198Analysis, detection, and mitigation of CVE-2023-20198 exploitation in Cisco IOS XE – QUB CSC3064 Network Security Assessment
abdurahmon3236/-cve-2024-6095Obfuscated CVE-2024-6095 exploit script that uses random strings, advanced payloads, custom headers, and randomized delays to evade detection during…