Ph4l4nx

restalker

LECmd

Lnk Explorer Command line edition!!

Malleable-CS-Profiles

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

tuoni

Tuoni

Awesome-Asset-Discovery

List of Awesome Asset Discovery Resources

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

hades

Go shellcode loader that combines multiple evasion techniques

KoviD

Linux kernel rootkit

Triage-Linux

unKover

PoC Anti-Rootkit to uncover Windows Drivers/Rootkits mapped to Kernel Memory.

SharpCollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

EDRSilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

triageX

TriageX - Linux Triage Tool Is a BASH shell script designed to collect evidences in an incident with Linux machines. The script uses native Linux commands to run.

flutter-spy

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

SharpLNKGen-UI

UI for creating LNKs

LinkedInt

LinkedIn Recon Tool

Spoofy

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

PoolParty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

Windows-One-Way-Stagers

Windows Stagers to circumvent restrictive network environments

steg86

Hiding messages in x86 programs using semantic duals

BokuLoader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

AceLdr

Cobalt Strike UDRL for memory scanner evasion.

speakeasy

Windows kernel and user mode emulation.

uriDeep

Unicode encoding attacks with machine learning

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

CVE-2023-21608

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

linux_malware_analysis_container

Docker container for quickly analyzing Linux malware