Chankro
tarlogicsecurity/chankroHerramienta para evadir disable_functions y open_basedir
exploitationpayload-developmentpenetration-testing+3
495
tarlogicsecurity/chankroHerramienta para evadir disable_functions y open_basedir
bc-security/empireEmpire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
x-3306/project-onyxAdvanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…
0xsp-srd/mortarevasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
pwn1sher/frostbyteCombines AppDomain Manager injection with shellcode embedding in signed binaries to evade EDR/AV detection for red team payloads.
chvancooten/maldev-for-dummiesA workshop about Malware Development
idov31/sandmanNTP-based backdoor for hardened networks, delivering and executing arbitrary shellcode via spoofed NTP traffic with optional persistence as a Windows…
inf0secrabbit/badassmacrosC# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.
codewhitesec/handlekatzPIC-based Lsass memory dumper using cloned handles to evade detection, producing obfuscated dumps with minimal memory footprint for red team…
cerberusmrxi/cerberus-react2shell-scanner-exploitElite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation,…
cobbr/sharpsploitSharpSploit is a .NET post-exploitation library written in C#
chaelsoo/hollowA shellcode loader generator with support for multiple injection techniques, built for red team engagements.
sunblaze-ucb/exploitgymExploitGym is a large-scale, realistic benchmark built from real-world vulnerabilities designed to evaluate AI agents' ability to develop exploits.
bw3ll/sharemSHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…
wra7h/flavortownVarious ways to execute shellcode
s3cur3th1ssh1t/nimsyscallpackerPacks C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…
nul0x4c/manualrsrcdatafetchingGet your data from the resource section manually, with no need for windows apis
hussienmisbah/exploitsRepository containing exploit scripts for various CVEs, targeting web applications, binaries, and network services, suitable for penetration testing…