Tools

ne0nd0g/merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

bhassani/eternalbluec

EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit, EternalBlue vulnerability detector, DoublePulsar detector and DoublePulsar…

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

icyguider/nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

aetsu/offensivepipeline

OfensivePipeline allows you to download and build C# tools, applying certain modifications in order to improve their evasion for Red Team exercises.

shutdownrepo/shellerator

Simple CLI tool for the generation of bind and reverse shells in multiple languages

drew-alleman/powershell-backdoor-generator

Reverse backdoor written in PowerShell and obfuscated with Python. It generates payloads for popular hacking devices like Flipper Zero and Hak5 USB…

t0thkr1s/revshellgen

Reverse shell generator written in Python 3.

pwn1sher/frostbyte

Combines AppDomain Manager injection with shellcode embedding in signed binaries to evade EDR/AV detection for red team payloads.

d3lb3/keefarcereborn

A standalone DLL that exports databases in cleartext once injected in the KeePass process.

adamsvoboda/nim-loader

WIP shellcode loader in nim with EDR evasion techniques

therealdreg/shellex

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010…

zznop/sploit

Go package that aids in binary analysis and exploitation

icyguider/nimcrypt

PE Crypter written in Nim

kasturixbm5/staged-dll-injection-smb-

Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification study (CRTO).

kira2040k/avbypass

golang script for bypass AV and work only in windows platform

justin-p/psforgot2keyxchange

PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell

ac8999/cve-2009-3999-hp-power-manager-4.2-build-7-buffer-overflow

Automatic script written in python for CVE-2009-3999