Tools

itm4n/vba-runpe

A VBA implementation of the RunPE technique or how to bypass application whitelisting.

shiva108/pentestproxy

Scripts for: How to Build a Covert Pentesting Infrastructure Almost Free

duo-labs/mysslstrip

Proof-of-concept tool demonstrating MITM attack to strip SSL/TLS from MySQL connections, exploiting CVE-2015-3152 for network penetration testing.

milo2012/ipv4bypass

Using IPv6 to Bypass Security

an0nud4y/evilginx-phishing-infra-setup

Evilginx Phishing Infrastructure Setup Guide - Securing Evilginx and Gophish Infrastructure, Removing IOCs, Phishing TTPs

papamica/waf-checker

Tests your WAF with +160 payloads

blacksnufkin/byovd

BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609,…

xm0kht4r/av-edr-killer

AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)

assetnote/nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

solidevil14/suricata-rule-for-detecting-cve-2025-55182

CVE‑2025‑55182 Detection

nyan-x-cat/lime-rat

LimeRAT | Simple, yet powerful remote administration tool for Windows (RAT)

thewover/donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…

nu11secur1ty/iis-backdoor

Stealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…