shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually from NTDLL using a hash-based method.

An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.

一款高性能 HTTP 内存代理 | 哥斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理

Cookie-share是一个 Chrome 扩展，允许用户在不同设备或浏览器之间发送和接收 cookies。它使用 Cloudflare Worker 作为后端来存储和检索 cookie 数据。

Cookie-share是一个 Chrome 扩展，允许用户在不同设备或浏览器之间发送和接收 cookies。它使用 Cloudflare Worker 作为后端来存储和检索 cookie 数据。

.NET project for installing Persistence

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…

Create Anti-Copy DRM Malware

支持x86/x64的DLL和Shellcode 的Windows注入的免杀工具，支持图形化界面

🎃 PumpBin is an Implant Generation Platform.

Execute unmanaged Windows executables in CobaltStrike Beacons

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

Convert binaries to shellcode (C, C#, CPP, ASM, BOF loader, PS to b64)

SAIVS (Spider Artificial Intelligence Vulnerability Scanner).

Automate ssh private key extraction from ssh-agent

SSH man-in-the-middle tool

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

zig compile time string encryption

Evasion by machine code de-optimization.

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it wi…

Python library for reading and writing Windows shortcut files (.lnk). Python 3 only.

Windows驱动学习笔记

远程调用(rpc)浏览器方法，免去抠代码补环境

感觉css真好难呀

Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

d/invoke function resolver in Golang

PE bin2bin obfuscator