Empire
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
adversarial-attackcommand-and-controldata-exfiltration+16
5.3k
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
trickster0/offensiverustRust Weaponization for Red Team Engagements.
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
idov31/sandmanNTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…
chaelsoo/hollowA shellcode loader generator with support for multiple injection techniques, built for red team engagements.
kasturixbm5/staged-dll-injection-smb-Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification study (CRTO).
inf0secrabbit/badassmacrosC# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.
nhas/reverse_sshSSH-based reverse shell management tool with native SCP/SFTP support, multiple transport protocols, Windows DLL generation, and fileless execution…
yzddmr6/java-shellcode-loader基于Java实现的Shellcode加载器
dec0ne/dllnotificationinjectionA POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote…
0xsp-srd/mortarevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
sunblaze-ucb/exploitgymExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.
wra7h/flavortownVarious ways to execute shellcode
lukechilds/reverse-shellOn-demand reverse shell service that auto-detects target environment and executes appropriate payload for remote access during penetration tests.
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
chvancooten/maldev-for-dummiesA workshop about Malware Development