MalDev
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
anti-boteducationencryption-decryption-tools+9
102
captmag/maldevCreation of multiple Malware tools consisting of evasion, enumeration and exploitation
jm33-m0/emp3r0rSelf‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
vxunderground/vx-apiCollection of various malicious functionality to aid in malware development
jkornev/hidden🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
twosevenonet/edr-redirRedirects EDR working folders using a Bind Filter (bindflt.sys) to bypass endpoint detection, corrupt EDR services, or replace with…
duhirsch/moveedrPermanently disable EDRs as local admin
rek7/postshellPostShell - Post Exploitation Bind/Backconnect Shell
kiexitdispatcher/goredops🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on…
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
h3raklez/cve-2025-21756Educational lab demonstrating a use-after-free (UAF) exploit in the Linux kernel's vsock subsystem for local privilege escalation to root, with…
devianntsec/cve-2024-30051Master's Thesis research on CVE-2024-30051 (Windows DWM Heap Overflow). Features a high-reliability exploit with automated heap spray optimization,…
shadow1ng/fscan一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
pennyw0rth/netexecPost-exploitation framework for automated network authentication testing, credential harvesting, and lateral movement across Windows/AD environments…
ngalongc/autolocalprivilegeescalationAn automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically
ghostvectoracademy/dllhijackhunterAutomated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
secnigma/cve-2021-3560-polkit-privilege-esclationAutomated Bash PoC for CVE-2021-3560 polkit privilege escalation. Exploits dbus timing attack to inject a sudo user and gain root shell on vulnerable…