a7t0fwa7

SymProcSleuth. A pure C version of SymProcAddress

windows-ps-callbacks-experiments. Files for http://deniable.org/windows/windows-callbacks

DllDragon. A simple to use single-include Windows API resolver

Pandora-Hvnc-Hidden-Browser-Real-Vnc-Working-Chromium-Edge-Opera-Gx. Hidden Features Full Hidden Access Hidden Desktop Hidden Browsers Hidden Cmd Clone Profile Hidden PowerShell Hidden Explorer Hidden Startup Hidden Applications

BSQLi-2.0. reverse engineered and improved BSQLi script from Coffinxp

Attacker_Infrastructure_Setup. Shell

RemoveNATfromWSL. Bridge your WSL instance onto to your network

Valkyries-Embrace. Valkyrie's Embrace is a tool written in the Odin programming language that allows executing shellcode on a remote system.

PrivilegeEscalationClass. C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin

CaveCarver. CaveCarver - PE backdooring tool which utilizes and automates code cave technique

Leaked-Credentials. how to look for Leaked Credentials !

anti_injection. Prevents dll injection using SetProcessMitigationPolicy.

Logsensor. A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

FileExtractor. C++ Code to Extract Windows File and Receive in Linux Machine

Null-AMSI. Null-AMSI is an AMSI and ETW bypass that takes advantage of .NET types (.NET Reflection) to bypassing AV/EDR.

RDPCredentialStealer. RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++

hidden. 🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

DumpLsass. C++ Code to perform a MiniDump of lsass.exe

Admin2Sys. Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM

HypercallPageHook. POC Hook of nt!HvcallCodeVa

instagram-scraper. scrapes medias, likes, followers, tags and all metadata. Inspired by instagram-php-scraper

AnonGT. Redirect All Traffic Through Tor Network

emailGPT. a quick and easy interface to generate emails with ChatGPT

val_crypt. compile-time encryption of values

Proxll. Tool designed to simplify the generation of proxy DLLs while addressing common conflicts related to windows.h

.NET_PROFILER_DLL_LOADING. .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit is loading a malicious DLL using Task Scheduler (MMC) to bypass UAC and getting admin privileges.

EchoStrike. Deploy undetectable reverse shells and perform stealthy process injection with EchoStrike – a Go-based tool for ethical hacking and Red Team operations.

Phunter. Phunter is an osint tool allowing you to find various information via a phone number 🔎📞

EDR-Freeze. EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.

S4Uwhoami. Simple project shows how to use S4U2Self in Windows for making a "super whoami"

reverse-shell-generator. Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

crewAI. Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.

bin2shellcode. C++ tool and library for converting .bin files to shellcode in multiple output formats.

BaseEncoder. Multi Base Encoder, Encode in Base 16,32,64,85 with Replace and Reverse Features

BackDoor-And-Listener. Python

undetectableRevShell. This repo is for the youtube video where we have explained how to make a detectable reverse shell undetectable by windows defender

sudo. It's sudo, for Windows

Botnet. Python

StealthAPCDispatcher. Thread scheduling stealth method using APC with encrypted shellcode

bolt.new. Prompt, run, edit, and deploy full-stack web applications

BrowserSnatcher. This project steals important data from all chromium and gecko browsers installed in the system and gather the data in a stealer db to be exfiltrated out.

HackerGPT-2.0. TypeScript

Custom-GetProcAddress. A custom implementation of GetProcAddress, often used in malware to evade detection by bypassing standard API resolution methods

CallTrace. Simple Utility Tool To Trace System Calls Using Instrumention Callbacks.

shadowcloak. Windows MTD-Based Ransomware Prevention using new extensions and file associations for files on choosen directories.

Microsoft-Defender. Windows Security Center ISV Product Register

memvid. Video-based AI memory library. Store millions of text chunks in MP4 files with lightning-fast semantic search. No database needed.

Marble. The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.

LibreChat. Enhanced ChatGPT Clone: Features OpenAI, GPT-4 Vision, Bing, Anthropic, OpenRouter, Google Gemini, AI model switching, message search, langchain, DALL-E-3, ChatGPT Plugins, OpenAI Functions, Secure Multi-User System, Presets, completely open-source for self-hosting. More features in development

FullBypass. A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to DM if you find some bugs :)

Jomungand. Shellcode Loader with memory evasion

Sus-Domain-Monitor-CS-Blowout. Monitor all new suspicious domains from CS blowout

PE_Image_Injector. 将当前进程的 PE Image (Sections) 注入到其他进程运行，实现进程迁移。Inject the PE Image (Sections) of the current process into other processes to achieve process injection.

gelion-bypass. bypass for authentication i created which is an all in one hook.

Syscall-Swapper. Simple project I made to swap over a syscall number from one function to another. Use freely just credit me...

codecave-hook. codecave hook reverse engineering toolkit.

OffsetsUpdater. A generic software to update dynamic memory locations using byte patterns.

Chariot-Tackle. A small, easy to use API for making indirect syscalls locally.

metamalloc. Single header template based general purpose memory allocation library for Linux & Windows. Repo also provides a live http memory profiler as a separate single-header with no dependencies

Favicon_Recon. Search in shodan foe relted hosts with the same hash of the favicon of website