Project-Onyx
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
ai-securitycommand-and-controlcryptography+6
118
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
cerberusmrxi/cerberus-react2shell-scanner-exploitElite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation,…
acedef/synthaptPlaybook-based adversary simulation framework that compiles JSON-defined attack paths into position-independent shellcode payloads for validating…
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
trickster0/offensiverustRust Weaponization for Red Team Engagements.
nhas/reverse_sshSSH-based reverse shell management tool with native SCP/SFTP support, multiple transport protocols, Windows DLL generation, and fileless execution…
codewhitesec/handlekatzPIC-based Lsass memory dumper using cloned handles to evade detection, producing obfuscated dumps with minimal memory footprint for red team…
pwn1sher/frostbyteCombines AppDomain Manager injection with shellcode embedding in signed binaries to evade EDR/AV detection for red team payloads.
inf0secrabbit/badassmacrosC# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.
chaelsoo/hollowA shellcode loader generator with support for multiple injection techniques, built for red team engagements.
kasturixbm5/staged-dll-injection-smb-Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification study (CRTO).
hussienmisbah/exploitsRepository containing exploit scripts for various CVEs, targeting web applications, binaries, and network services, suitable for penetration testing…
bishopfox/sliverAdversary Emulation Framework
chvancooten/maldev-for-dummiesA workshop about Malware Development
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
0xsp-srd/mortarevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
idov31/sandmanNTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…