Kibouo

Apktool

A tool for reverse engineering Android apk files

mold

Mold: A Modern Linker 🦠

c4

C in four functions

sslh

Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

astropy

Astronomy and astrophysics core library

dot

The Deepfake Offensive Toolkit

PPPwn

PPPwn - PlayStation 4 PPPoE RCE

winafl

A fork of AFL for fuzzing Windows binaries

dotnet9x

Backport of .NET 2.0 - 3.5 to Windows 9x

roop-unleashed

Evolved Fork of roop with Web Server and lots of additions

TotalRecall

This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

evilgophish

evilginx3 + gophish

awesome-executable-packing

A curated list of awesome resources related to executable packing

RustRedOps

🦀 | RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust

pdbex

pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers

ntvdmx64

Run Microsoft Windows NTVDM (DOS) on 64bit Editions

Voidgate

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page.

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

experiments

Expriments

Evilginx-Phishing-Infra-Setup

Evilginx Phishing Engagement Infrastructure Setup Guide

msi-search

hwbp4mw

deluder

Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock and Linux Sockets out of the box. ⚡

Invoke-DumpMDEConfig

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

advprompter

Official implementation of AdvPrompter https//arxiv.org/abs/2404.16873

snapshot

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

tmux-which-key

A plugin for tmux that allows users to select actions from a customizable popup menu 🧰

RelabelAbuse

grappler