LsvanDarko

lxkns

Discover Linux kernel namespaces in Go. Almost everywhere. Aware of various OCI container engines, even engines in containers.

core

Common Open Research Emulator

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

Awesome-Cellular-Hacking

Awesome-Cellular-Hacking

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

cackle

A code ACL checker for Rust

mail-in-the-middle

fwknop

Single Packet Authorization > Port Knocking

CVE-2024-1086

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

tracecat

😼 The open source alternative to Tines / Splunk SOAR. Build AI-assisted workflows, orchestrate alerts, and close cases fast.

unKover

PoC Anti-Rootkit to uncover Windows Drivers/Rootkits mapped to Kernel Memory.

Collect-MemoryDump

Collect-MemoryDump - Automated Creation of Windows Memory Snapshots for DFIR

zed

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

impulse-xdr

Fully automated host & network intrusion detection platform. Detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools.

titanldr-ng

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

oci-seccomp-bpf-hook

OCI hook to trace syscalls and generate a seccomp profile

udica

This repository contains a tool for generating SELinux security profiles for containers

CarbonCopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

BlueSpy

PoC to record audio from a Bluetooth device

GamingServiceEoP

arsenal-rs

Rusty Arsenal - A collection of experimental Process Injection and Post-Exploitation Techniques in Rust

gocheck

DefenderCheck but blazingly fast™

linjector-rs

Code injection on Android without ptrace

pywsus

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

falco

Cloud Native Runtime Security

framework

A static site generator for data apps, dashboards, reports, and more. Observable Framework combines JavaScript on the front-end for interactive graphics with any language on the back-end for data analysis.

dot

The Deepfake Offensive Toolkit

Above

Invisible network protocol sniffer

pingora

A library for building fast, reliable and evolvable network services.