aus-mate

bflat

C# as you know it but with Go-inspired tooling (small, selfcontained, and native executables)

bindiff

Quickly find differences and similarities in disassembled code

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sysreptor

Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

krbrelayx

Kerberos unconstrained delegation abuse toolkit

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

power-pwn

An offensive security toolset for Microsoft 365 focused on Microsoft Copilot, Copilot Studio and Power Platform

SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

sccmhunter

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

No-Consolation

A BOF that runs unmanaged PEs inline

Kerbeus-BOF

BOF for Kerberos abuse (an implementation of some important features of the Rubeus).

cuddlephish

Weaponized Browser-in-the-Middle (BitM) for Penetration Testers

PrivKit

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

ntlmscan

scan for NTLM directories

LdrLockLiberator

For when DLLMain is the only way

SpamChannel

Spoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)

MaldevAcademyLdr.1

Jomungand

Shellcode Loader with memory evasion

Conferences

EDRSandblast-GodFault

EDRSandblast-GodFault

rust_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

gssapi-abuse

A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks

PastDSE

DSE bypass using a leaked cert and adjusting the current clock.

BOFRyptor

ROP_ROCKET

ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Syscalls attack, a novel Heaven's Gate, and "shellcodeless" ROP. The framework utilizes emulation and obfuscation to help expand the attack surface.

forticrack

Decrypt encrypted Fortienet FortiOS firmware images

Defender-Exclusions-Creator-BOF

stego-playground

Nimpostor

Nimpostor is an implant written in Nim designed to work with MythicC2. It's mainly used for initial access and system enumeration.