KDU
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
binary-exploitationdefensive-toolsexploitation+8
2.8k
hfiref0x/kduWindows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
yarrick/iodineTunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.
greatscottgadgets/facedancerImplement your own USB device in Python, supported by a hardware peripheral such as Cynthion or GreatFET
michaelweber/macromeExcel Macro Document Reader/Writer for Red Teamers & Analysts
gmh5225/dropperTool for embedding payloads into JPG/PNG format images, allowing to perform certain actions when opening them.
daniomass/slivermirageCrystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants
exploit-garbage/0day-rubbishRedefining vulnerability disclosure in the AI era. We mass-produce exploitable 0days and disclose them directly, using event-driven pressure to…
umpolungfish/byvalvertakes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
redcode-labs/coldfireGolang malware development library
idov31/silversealLinux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…
rosesecurity/anti-virus-evading-payloadsDuring the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system…
blackhillsinfosec/wififorgeAutomated WiFi hacking lab environment using mininet-wifi to simulate wireless attack vectors for pentester training, eliminating hardware overhead.
keowu/badrentdrv2A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them…
secarmalabs/indushellPoC C&C for the Industroyer malware
frenchcisco/ratelRAT-el is an open source penetration test tool that allows you to take control of a windows machine. It works on the client-server model, the server…
asamassekou10/ship-safeThe independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…
checkpointsw/vectoredoverloadingLocal PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…
kitsune-de/stealth_callHeader-only Windows x64 indirect syscall library. Zero CRT, zero IAT, VEH anti-BP, AMSI/ETW bypass, W^X memory, per-call dynamic stubs.