bonjourmalware

berty

Berty is a secure peer-to-peer messaging app that works with or without internet access, cellular data or trust in the network

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

idaplugins-list

A list of IDA Plugins

vulnerable-AD

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

exe_to_dll

Converts a EXE into DLL

OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

regexp2

A full-featured regex engine in pure Go based on the .NET engine

ShellcodeTemplate

An easily modifiable shellcode template for Windows x64/x86

yetAnotherObfuscator

C# obfuscator that bypass windows defender

refinery

High Octane Triage Analysis

Dirty-Vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

goloader

load and run golang code at runtime.

EvilSln

A New Exploitation Technique for Visual Studio Projects

avred

Analyse your malware to surgically obfuscate it

backdoorfactory

A from-scratch rewrite of The Backdoor Factory - a MitM tool for inserting shellcode into all types of binaries on the wire.

shell-backdoor

all shell backdoor in the world

monitor

The new Cuckoo Monitor.

frida-boot

Frida Boot 👢- A binary instrumentation workshop, with Frida, for beginners!

Malware

RogueSliver

A suite of tools to disrupt campaigns using the Sliver C2 framework.

windows_x64_shellcode_template

An easily modifiable shellcode template for Windows x64 written in C

msdocsviewer

msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.

kavanoz

Statically unpacking common android banker malware.

OSEP-Breaking-Chains

A collection of code snippets built to assist with breaking chains.

dumpscan

Finding secrets in kernel and user memory

donut-decryptor

Retrieve inner payloads from Donut samples

shellcode

Shellcode library as a Go package

dnd

A web based drag and drop file transfer tool for sending files across the internet.

forger

bintriage

additional debug information about executable files