NimSyscallPacker
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
binary-exploitationexploitationlateral-movement+7
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
barriuso/smbghost_automateexploitationSMBGhost (CVE-2020-0796) Automate Exploitation and Detection
riccardoancarani/liquidsnakeFileless lateral movement tool using WMI Event Subscriptions to execute .NET assemblies in memory, with shellcode injection via named pipes for…
iamsopotatoe-coder/tinyloadOpen source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
risksense-ops/cve-2016-6366Public repository for improvements to the EXTRABACON exploit
winterknife/evenstarIntel 64/Windows low-level experiments
n00py/hwachaDeploy payloads to *Nix systems en masse
acedef/synthaptPlaybook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
enkomio/brokenflowA simple PoC to invoke an encrypted shellcode by using an hidden call
jm00nj/icmp-ghost-a-fileless-x64-assembly-c2-agentFileless x64 Assembly C2 framework with dual-channel ICMP/DNS protocol pivoting, direct syscall execution, and ptrace-based process injection for…
licitrasimone/crystalsliverCrystal Palace Evasion kit for Sliver
chaelsoo/hollowA shellcode loader generator with support for multiple injection techniques, built for red team engagements.
klezvirus/rpcproxyinvokeSimple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
0xsp-srd/aetherWindows memory-forensics and threat hunting tool that scans live process memory for malicious patterns, injection techniques, and reflectively loaded…
airbus-cert/yara-ttdUse YARA rules on Time Travel Debugging traces
nickguitar/yapsYet Another PHP Shell - The most complete PHP reverse shell