aus-mate

The_Shelf

Retired TrustedSec Capabilities

UwuRatel

Pink BRC4 skin/theme.

Shoggoth

Shoggoth: Asmjit Based Polymorphic Encryptor

flower

a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor

Codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

CloudInject

malIDP

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

MutationGate

Use hardware breakpoint to dynamically change SSN in run-time

Banshee

Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.

ADCSCoercePotato

titanldr-ng

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

hw-call-stack

Use hardware breakpoints to spoof the call stack for both syscalls and API calls

Unwinder

Call stack spoofing for Rust

UAC-BOF-Bonanza

Collection of UAC Bypass Techniques Weaponized as BOFs

Pyramid

a tool to help operate in EDRs' blind spots

Embedder

Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies

emba

EMBA - The firmware security analyzer

NtCall64

Windows NT x64 syscall fuzzer

sddl_py

Parse SDDL strings

SharpADWS

Active Directory reconnaissance and exploitation for Red Teams via the Active Directory Web Services (ADWS).

NidhoggScript

NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg

InsightEngineering

Hardcore Debugging

Stardust

A modern 64-bit position independent implant template

CVE-2024-0204

Authentication Bypass in GoAnywhere MFT

CLR_Heap_encryption

llvm-yx-callobfuscator

LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

bflat

C# as you know it but with Go-inspired tooling (small, selfcontained, and native executables)

rust_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.