
metasploit-framework
Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

Open-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…

UNIX-like reverse engineering framework and command-line toolset.

Adversary Emulation Framework


Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

Modular Windows C2 framework with a Rust teamserver, Zig implant, indirect syscalls, AMSI bypass, reflective/PoolParty injection, in-memory BOF…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes.

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

Multi-architecture assembler framework that converts assembly source into machine code for Arm, x86, MIPS, PowerPC, RISC-V, and more, with a…

A shellcode loader generator with support for multiple injection techniques, built for red team engagements.

Dual-purpose JNDI injection and Java deserialization exploitation framework with advanced bypass capabilities for WAF, RASP, and high JDK versions.…

Crystal Palace Evasion kit for Sliver


micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

Exploit for CVE-2015-8522 targeting Tivoli FastBack Server with stack-based buffer overflow, ASLR/DEP bypass, and automated reverse-shell…