
phantap
Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

Phantom Tap (PhanTap) - an ‘invisible’ network tap aimed at red teams

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

TrojanDropper/PS.Maloader.d

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

Redirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…

LSTAR - CobaltStrike Translated to EN

Exploit for CVE-2023-23397 Outlook NTLM hash leak via malicious calendar invitations. Includes PowerShell weaponization, Responder integration, and…

Proof-of-concept exploit for CVE-2026-0828, a BYOVD vulnerability in Safetica ProcessMonitorDriver.sys allowing unprivileged termination of…

Dominate the domain. Relay to royalty.

Tunnel TCP connections through a file

Chisel new generation, written in rust. SSH under WSS with some customization.

AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)

BYOVD: Use 360 WFP driver to block EDR/XDR network connection.

Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.

DejaVU - Open Source Deception Framework

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers,…

Run Powershell without software restrictions.

A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation