rysaunders

ROADtoken

material-ui

Material UI: Comprehensive React component library that implements Google's Material Design. Free forever.

toolpad

Toolpad: Full stack components and low-code builder for dashboards and internal apps.

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

SweetPotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

Alaris

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

Venom

Venom - A Multi-hop Proxy for Penetration Testers

ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.

Omnispray

Modular Enumeration and Password Spraying Framework

pspy

Monitor linux processes without root permissions

bpfmon-example

proof-of-concept example of using eBPF to Monitor for eBPF Map tampering

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

ADFSpoof

ADFSDump

bypass-clm

PowerShell Constrained Language Mode Bypass

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

DAMP

The Discretionary ACL Modification Project: Persistence Through Host-based Security Descriptor Modification

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

CsWin32

A source generator to add a user-defined set of Win32 P/Invoke methods and supporting types to a C# project.

drltrace

Drltrace is a library calls tracer for Windows and Linux applications.

hetty

An HTTP toolkit for security research.

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

InfinityHook

Hook system calls, context switches, page faults and more.

DefenderCheck

Identifies the bytes that Microsoft Defender flags on.

Invoke-CradleCrafter

PowerShell Remote Download Cradle Generator & Obfuscator

WeaponsTraining

Weapons Training for the Empire Workshop

Sickle

Payload development framework

freeCodeCamp

freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

BookPlayer

The code running on the RasPi powered, RFID controlled audio book player