LsvanDarko

nexmon

The C-based Firmware Patching Framework for Broadcom/Cypress WiFi Chips that enables Monitor Mode, Frame Injection and much more

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

whereami

Uses WiFi signals :signal_strength: and machine learning to predict where you are

orochi

The Volatility Collaborative GUI

Kompilierer

Der Kompilierer der Deutschen Programmiersprache

FRASHER

A rework of FRASH (FRamework to test Algorithms of Similarity Hashing)

mrsh-cf

wifi-framework

Wi-Fi Framework for creating proof-of-concepts, automated experiments, test suites, fuzzers, and more.

goldberg

A Rust-based obfuscation macro library!

C

Collection of various algorithms in mathematics, machine learning, computer science, physics, etc implemented in C for educational purposes.

CallstackSpoofingPOC

C++ self-Injecting dropper based on various EDR evasion techniques.

aes_dust

Unlicensed tiny / small portable implementation of 128/256-bit AES encryption in C, x86, AMD64, ARM32 and ARM64 assembly

metame

metame is a metamorphic code engine for arbitrary executables

awesome-tunneling

List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting.

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

LdrLockLiberator

For when DLLMain is the only way

EtwTi-FluctuationMonitor

Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections

CFG-FindHiddenShellcode

Walks the CFG bitmap to find previously executable but currently hidden shellcode regions

wirehole

WireHole is a combination of WireGuard, Pi-hole, and Unbound in a docker-compose project with the intent of enabling users to quickly and easily create a personally managed full or split-tunnel WireGuard VPN with ad blocking capabilities thanks to Pi-hole, and DNS caching, additional privacy options, and upstream providers via Unbound.

insomnia

The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC. With Cloud, Local and Git storage.

silentbridge

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

Hooka

Evasive shellcode loader, hooks detector and more

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

xgadget

Fast, parallel, cross-variant ROP/JOP gadget search for x86/x64 binaries.

ropr

A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative

power-pwn

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

Proxy-DLL-Loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

legba

A multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

Ropper

Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

FalconHound

FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is designed to be used in conjunction with a SIEM or other log aggregation tool.