MalDev
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
anti-boteducationencryption-decryption-tools+9
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
jm33-m0/emp3r0rLinux post-exploitation C2 framework with gossip mesh networking, memory-only operations, modular payloads, and OPSEC-focused transport for red team…
jkornev/hiddenWindows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
twosevenonet/edr-redirRedirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…
rek7/postshellPostShell - Post Exploitation Bind/Backconnect Shell
duhirsch/moveedrPermanently disable EDRs as local admin
gmh5225/kprocterminatorWindows kernel driver designed for terminating specific processes on a system
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
kiexitdispatcher/goredops🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on…
h3raklez/cve-2025-21756Educational lab demonstrating a use-after-free (UAF) exploit in the Linux kernel's vsock subsystem for local privilege escalation to root, with…
devianntsec/cve-2024-30051Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization,…
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
ngalongc/autolocalprivilegeescalationAn automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
ghostvectoracademy/dllhijackhunterAutomated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
jonaslejon/ad-autopwnAutomated Active Directory attack chain from zero-auth to Domain Admin. Chains 25+ techniques including Kerberoast, AD CS ESC1-16, Shadow…