ghostwolflab/apt-individual-combat-guideEducational guide and code repository for understanding APT attack techniques, covering reconnaissance, web and service exploitation, trojans, C2,…
toxy4ny/bl00dym4ryEducational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…
beefproject/beefThe Browser Exploitation Framework Project
iterat0r/cnaemulatorStandalone emulation and testing harness for Cobalt Strike Aggressor Scripts (.cna) that validates syntax, mocks Beacon APIs, and executes BOFs via…
davidcarliez/mythic_telegram_profileMythic C2 profile that tunnels Athena and Apollo agent traffic through Telegram bot-to-bot messages, bridging encrypted payloads to Mythic via its…
lyravoid/kernelpatchPatches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.
m4sc3r4n0/evil-droidFramework to create, generate, and embed APK payloads for Android penetration testing, leveraging Metasploit for exploitation and Apktool for…
bhassani/eternalbluecEternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar…
stillbigjosh/adaptix-serverless-c2Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
cduram/chirp-codeexecution_via_malicious_imagefileProof-of-concept exploit for arbitrary code execution through eval() injection in a ham radio programming application, including malicious .itm/.img…
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
ekultek/graffitiA tool to generate obfuscated one liners to aid in penetration testing
nmht3t/onedrive-udc2OneDrive as a covert C2 transport for Cobalt Strike
mzfr/liffyLocal file inclusion exploitation tool
henriksb/extensionspooferSpoof file icons and extensions in Windows
umpolungfish/byvalvertakes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
ripits-sec/couchpotatoWindows privilege escalation tool that patches ETW and AMSI and uses indirect syscalls to abuse SeImpersonatePrivilege, escalating service accounts…
rurixis/msrkitA concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.sys)
