markuta

dive

A tool for exploring each layer in a docker image

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

official-images

Primary source of truth for the Docker "Official Images" program

LLocalSearch

LLocalSearch is a completely locally running search aggregator using LLM Agents. The user can ask a question and the system will use a chain of LLMs to find the answer. The user can see the progress of the agents and the final answer. No OpenAI or Google API keys are needed.

garble

Obfuscate Go builds

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

OSCP

OSCP Cheat Sheet

dnsperftest

DNS Performance test

LibAFL

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

inceptor

Template-Driven AV/EDR Evasion Framework

SysWhispers2

AV/EDR evasion via direct system calls.

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

DeimosC2

DeimosC2 is a Golang command and control framework for post-exploitation.

reverser_ai

Provides automated reverse engineering assistance through the use of local large language models (LLMs) on consumer hardware.

DripLoader

Evasive shellcode loader for bypassing event-based injection detection (PoC)

Noctilucent

Using TLS 1.3 to evade censors, bypass network defenses, and blend in with the noise

DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

DarkWidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

MyViewOfLinuxSystems

static-arm-bins

Statically compiled ARM binaries for debugging and runtime analysis

Reconator

Automated Recon for Pentesting & Bug Bounty

frida-boot

Frida Boot 👢- A binary instrumentation workshop, with Frida, for beginners!

T95-H616-Malware

"Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes

Create-Thread-Shellcode-Fetcher

This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and download and execute your C2-shellcode which is hosted on your (C2)-webserver.

KaliLists

Repo of all the default wordlists included in Kali. Convienent if you're using something other than Kali.

SharpCall

Simple PoC demonstrating syscall execution in C#

Direct-Syscalls-A-journey-from-high-to-low

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

DebugAmsi

DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

amsi-tracer

Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution.