Tools

themalwareguardian/cve-2019-25485

Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The…

nate-ryan-7690/home_soc_suite

A personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…

sshuttle/sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS…

riccardoancarani/liquidsnake

Fileless lateral movement tool using WMI Event Subscriptions to execute .NET assemblies in memory, with shellcode injection via named pipes for…

r4wd3r/suborner

Creates invisible Windows accounts with administrative privileges via direct SAM manipulation and RID hijacking, bypassing standard user management…

4g3nt47/striker

Multi-operator C2 framework with native C and Python agents, HTTP(S) channels, asynchronous tasking, and a reactive web UI for red team operations.

u53rw4r3/remotekeystrokes

A script to automate keystrokes through a graphical desktop program.

nemec/snapchat-map-scraper

Scrapes public Snap Map locations to download and classify stories for investigative analysis, with randomized geolocation and automated review…

shehzade/peeping-tom

Remote Windows keylogger with AES-256 encrypted keystroke exfiltration via configurable callback intervals and a companion Python server for log…

gosecure/wsuspicious

Local privilege escalation tool exploiting insecure WSUS connections on Windows via a man-in-the-middle proxy, enabling command execution with SYSTEM…

therealaleph/masterhttprelayvpn-rust

Rust port of @masterking32's MasterHttpRelayVPN — all credit to @masterking32 for the original idea and Python implementation. Free DPI bypass via a…