Small and highly portable detection tests based on MITRE's ATT&CK.

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and th…

windows-kernel-exploits Windows平台提权漏洞集合

Official git repo for iodine dns tunnel

earlyoom - Early OOM Daemon for Linux

LKM Linux rootkit

pongoOS

generate CobaltStrike's cross-platform payload

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

LSASS memory dumper using direct system calls and API unhooking.

tiny, portable SOCKS5 server with very moderate resource usage

Redis(<=5.0.5) RCE

The xfrpc project is a lightweight implementation of the FRP client written in C language for OpenWRT and IoT systems. It is designed to provide an efficient solution for resource-constrained devic…

PIC lsass dumper using cloned handles

tools

PRISM is an user space stealth reverse shell backdoor, written in pure C.

Threat Intel IoCs + bits and pieces of dark matter

nginx WebShell/内存马，更优雅的nignx backdoor

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.

Cobalt Strike Beacon Object Files

Simple password/cookies/history/bookmarks stealer/dumper for chrome all version (includes 80+), microsoft edge browser,includes all chromium based browsers, and all gecko based browser (firefox etc.).

a bytecode encryptor that can protect java source code.

(Demo) 3rd party agent for Havoc

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

USB/IP for Windows

LFI/RFI Payload Tests Project

A tool for creating proxy dll for hijacking

fork from http:https://icmpshell.sourceforge.net

自己实现的一个socks5服务端程序(目前仅支持tcp)