oXis

GPUSleep

Move CS beacon to GPU memory when sleeping

NimWinAPICustom

Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim

DoublePulsarPayload

C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

NimPElib

Lib to parse PE+ files. Currently *useless* because I'm learning Nim

bashbunny-payloads

Payloads for the Hak5 Bash Bunny

gomacro

Small utility to create Word Macro in Go using github.com/go-ole/go-ole

PyPowerSplit

Split a Powershell script, like PowerView, into base64 encoded functions

sliver

Adversary Emulation Framework

urlgrab

A golang utility to spider through a website searching for additional links.

alpine-tor

Just a simple rotating tor pool with haproxy load balancer. (with opt-in privoxy support)

CobaltStrike

CobaltStrike's source code

DeathSleep

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

doxycannon

A poorman's proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies

e3

E3: Encrypt-Everything-Everywhere framework for compiling C++ programs with encrypted operands.

EXCELntDonut

Excel 4.0 (XLM) Macro Generator for injecting DLLs and EXEs into memory.

gitsu

switch git user easily

go-ole

win32 ole implementation for golang

GoBot2

Second Version of The GoBot Botnet, But more advanced.

Havoc

The Havoc Framework.

libpebliss

Cross-Platform PE Manipulating Library

machinery

Machinery is an asynchronous task queue/job queue based on distributed message passing.

Nim

Nim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).

oxis.github.io

Personal blog

phat-beat

Python library for PHAT BEAT - A stereo DAC, AMP and VU for the Raspberry Pi

proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.

RunPE-In-Memory

Run a Exe File (PE Module) in memory (like what Software Packer Do)

shad0w

A post exploitation framework designed to operate covertly on heavily monitored enviroments

SilentMoonwalk

PoC Implementation of a TRUE call stack spoofer

tcpip_stack