A high performance TCP SYN port scanner.

Exploit tool for CVE-2021-43008 Adminer 1.0 up to 4.6.2 Arbitrary File Read vulnerability

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

A malicious KeePass plugin to exfiltrate the master key.

IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).

A Rust crate to load a shared library into a Linux process without using ptrace.

A Rust based DNS client, server, and resolver

KaynLdr is a Reflective Loader written in C/ASM

C++/Win32/Boost Windows RAT (Remote Administration Tool) with a multiplatform Java/Spring RESTful C2 server and Go, C++/Qt5 frontends

shouganaiyo-loader is a cross-platform Frida-based Node.js command-line tool that forces Java processes to load a Java/JVMTI agent regardless of whether or not the JVM has disabled the agent attach…

WhiteWinterWolf's PHP web shell

Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

Inject .NET assemblies into an existing process

Fast and lightweight x86/x86-64 disassembler and code generation library

proxylist, generate by fate0/getproxy project in every 15 minute

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

Protect and discover secrets using Gitleaks 🔑

It's the C version of https://github.com/mthbernardes/sshLooter

Web application fuzzer

Standalone HVNC Client & Server | Coded in C++ (Modified Tinynuke)

A quick example of the Hells Gate technique in Nim

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained p…

Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.

Nim-based assembly packer and shellcode loader for opsec & profit