Tools

calebmadrigal/trackerjacker

Like nmap for mapping wifi networks you're not connected to, plus device tracking

secforce/sharpwhispers

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

ryandamour/crlfmap

CRLFMap is a tool to find HTTP Splitting vulnerabilities

malwaretech/edrception

A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

security-onion-solutions/security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

es3n1n/no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

memn0ps/matrix-rs

Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)

nmap/nmap

High-performance network discovery and security auditing tool with advanced port scanning, OS detection, service version detection, and scriptable…

bytecode77/r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

xaff-xaff/cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

zeromemoryex/chaos-rootkit

Now You See Me, Now You Don't

mrash/psad

psad: Intrusion Detection and Log Analysis with iptables

al1ex/icmptunnel

icmptunnel

esrrhs/pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP