trickster0

OffensiveRust

Rust Weaponization for Red Team Engagements.

RedLizard

RedLizard Rust TCP Reverse Shell Server/Client

Enyx

Enyx SNMP IPv6 Enumeration Tool

Brave_Browser_1Day_POC

This is a crash for Brave Browser I found in New Years Eve, used to be a 0day when I found it

BlackLotus

BlackLotus UEFI Windows Bootkit

ghost

A sample client/server architecture

Obfuscator

A program for obfuscating C strings

Veil

Windows internal undocumented API.

azure-hunting

Collection of hunting resources for Microsoft Azure

clr-thing

rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.

coffee

A COFF loader made in Rust

container_sec_workstation

doublepulsar-rdp

Another unfinished doublepulsar RDP variant from years ago. Demonstrates hooking McsDispatch, never wrote the hook itself

GraphSpy

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

LdrLockLiberator

For when DLLMain is the only way

Periscope

socker

Checks SOCKS Proxy List To find Working Proxies

Stardust

An modern 64-bit position independent implant template

angryorchard-original

Original proof of concept I submitted to brokers demonstrating the vulnerability in hopes of getting rid of it.

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

clroxide

A rust library that allows you to host the CLR and execute dotnet binaries.

CollaRE

Multi-tool reverse engineering collaboration solution.

MemFiles

A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk

misc

miscellaneous scripts and programs

rogue

A barebones template of 'rogue' aka a simple recon and agent deployment I built to communicate over ICMP. Well, without the ICMP code.

rpc-svc

A simple RPC client and server running as a service. Project demonstrating client, server, and IDL file development. Based on Windows Sample

SharkOne

Cobalt Strike 二开项目

Sharp-Suite

Also known by Microsoft as Knifecoat :hot_pepper:

SilentMoonwalk

PoC Implementation of a TRUE call stack spoofer

wstunnel

Tunnel all your traffic over websocket protocol - Bypass firewalls/DPI - Static binary available