skim-milk

Social-media-c2

Script is a proof of concept how to control your machine by using social media sites.

0x00sec_code

Code for my 0x00sec.org posts

EVIL_RABBIT

-x-x-x- DO NOT RUN ON PRODUCTION MACHINE -x-x-x- LD_PRELOAD based user-land rootkit for Linux platform.

linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs

canisrufus

A stealthy Python based Windows backdoor that uses Github as a command and control server

zombieant

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

phantom-attack

POC for Phantom Attack

Kronos

Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism.

vx-underground-wordlist

Wordlist to crack .zip-file password

humanify

Deobfuscate Javascript code using ChatGPT

SysWhispers2

AV/EDR evasion via direct system calls.

TelemetrySourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

SysWhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

unit

NGINX Unit - universal web app server - a lightweight and versatile open source server that simplifies the application stack by natively executing application code across eight different programming language runtimes.

ESP32-COOP-DOC

Create an affordable and accessible automatic coop door using ESP32. DIY your chicken coop with customizable behavior based on time and light levels. Control it through a dedicated Bluetooth-enabled app. Find comprehensive build instructions, wiring diagrams.

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

karma

API pwndb

clair

Vulnerability Static Analysis for Containers

bpftrace

High-level tracing language for Linux

boulder

An ACME-based certificate authority, written in Go.

gobbler

PhishingTemplates

This is a collection of phishing templates and a landing page to be used with goPhish

AIRMASTER

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

Hob0Rules

Password cracking rules for Hashcat based on statistics and industry patterns

detection-rules

awesome-kubernetes-threat-detection

A curated list of resources about detecting threats and defending Kubernetes systems.

LOOBins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" macOS binaries and how they can be used by threat actors for malicious purposes.

sentinelone-queries

Repository of SentinelOne Deep Visibility queries.

vmdiff-prototype

Diff and display virtual machine snapshots