galoryber

profiler-lateral-movement

Lateral Movement via the .NET Profiler

Malware

macOS Malware Collection

decode-spam-headers

A script that helps you understand why your E-Mail ended up in Spam

Aladdin

openvasreporting

OpenVAS Reporting: Convert OpenVAS XML report files to reports

PyOTI

Python library for threat intelligence

fabric

fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

SharpSystemTriggers

Collection of remote authentication triggers in C#

SharpTokenFinder

C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps

PastDSE

DSE bypass using a leaked cert and adjusting the current clock.

PackMyPayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

Parasite-Invoke

Hide your P/Invoke signatures through other people's signed assemblies

BobTheSmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

dot

The Deepfake Offensive Toolkit

Docker-OSX

Run macOS VM in a Docker! Run near native OSX-KVM in Docker! X11 Forwarding! CI/CD for OS X Security Research! Docker mac Containers.

SWH-Injector

An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.

dnMerge

A lightweight .NET assembly dependency merger that uses dnLib and 7zip's LZMA SDK for compressing dependant assemblies.

JayFinder

Find DLLs with RWX section

LdrLockLiberator

For when DLLMain is the only way

lolcerts

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

PoolPartyBof

A beacon object file implementation of PoolParty Process Injection Technique.

ThreadlessInject-BOF

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

Evilginx2-Phishlets

Evilginx3 Phishlets version (0.2.3 & above) Only For Testing/Learning Purposes

Shellcode-Injection-Techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

Handly

Abuse leaked token handles.

EDRSandblast

SignToolEx

Patching "signtool.exe" to accept expired certificates for code-signing.

Christmas

ThreadlessInject

Threadless Process Injection using remote function hooking.

SingleDose

Generate Shellcode Loaders & Injects