dondish

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

MS-DOS

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

CredMaster

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

hwdbg

HyperDbg's logic analyzer and chip-level hardware debugger

bochspwn

A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

CrimsonEDR

Simulate the behavior of AV/EDR for malware development training.

EagleVM

Native code virtualizer for x64 binaries

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

PFHook

Page fault hook use ept (Intel Virtualization Technology)

ReverseKit

x64 Dynamic Reverse Engineering Toolkit

ntoskrnl

The Windows Research Kernel (WRK)

vscode-neovim

Vim mode for VSCode, powered by Neovim

rustc_codegen_clr

This rust compiler backend(module) emmits valid CIL (.NET IR), enabling you to use Rust in .NET projects.

zed

Code at the speed of thought – Zed is a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.

goldberg

A Rust-based obfuscation macro library!

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

iscsicpl_bypassUAC

UAC bypass for x64 Windows 7 - 11

SignToolEx

Patching "signtool.exe" to accept expired certificates for code-signing.

Marble

The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

Def1nit3lyN0tAJa1lbr3akTool

A jailbreak tool for all arm64 devices on iOS 16.0 to iOS 16.6.1

LOLDrivers

Living Off The Land Drivers

UnlinkDLL

DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable

stuxnet

Public open-source code of malware Stuxnet (aka MyRTUs).

vmprotect-3.5.1

VectorKernel

PoCs for Kernelmode rootkit techniques research.

LdrLibraryEx

A small x64 library to load dll's into memory.

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

bindiff

Quickly find differences and similarities in disassembled code

windows-drivers-rs

Platform that enables Windows driver development in Rust. Developed by Surface.