
Amsi-Killer
Lifetime AMSI bypass

Lifetime AMSI bypass


Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

Transfer files to and from a Windows host via ICMP in restricted network environments.

Mythic C2 agent targeting Linux and Windows hosts written in Rust

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.

Project Mantis: Hacking Back the AI-Hacker; Prompt Injection as a Defense Against LLM-driven Cyberattacks

Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

powershell tool for VM evasion

Automatically deploying Mythic C2 in Azure using Terraform

Git Web Hook Tunnel for C2

A coordinated disclosure and security advisory on Fermax Intercom DTML Injection vulneraiblity. Special thanks to Fermax International for prompt…

NLA Honeypot Associated Research

CVE-2025-6018 + CVE-2025-6019 Privilege Escalation Exploit

Docker projects to retain beacon source IPs using C2 relaying infra

Git clone Remote Code Execution exploit