Crystal Palace RDLL loader for Adaptix C2 with Ekko sleep obfuscation, IAT hooking via PICO, and per-section permission restoration

📝 An awesome Data Science repository to learn and apply for real world problems.

A collection of 100+ specialized Claude Code subagents covering a wide range of development use cases

A set of useful QA agents for Claude Code.

💫 Toolkit to help you get started with Spec-Driven Development

Project for generating and identifying deceptive LNK files.

AGENTS.md — a simple, open format for guiding coding agents

Public repository for Agent Skills

👻 Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.

A Guide To AI-Assisted Software Engineering

Proof of Concept (PoC) implant for creating custom Cobalt Strike Beacons

A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).

Various tips & tricks

Fawkes is a golang Mythic C2 Agent exclusively written by AI.

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

A collection of Azure AD/Entra tools for offensive and defensive security purposes

Automatic Exploit Generation with LLMs

Fully autonomous AI hacker to find actual exploits in your web apps. Shannon has achieved a 96.15% success rate on the hint-free, source-aware XBOW Benchmark.

Run CobaltStrike aggressorscript over TCP

An MCP extension for Ghidra

n³ The unorthodox terminal file manager

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

Linux Shared Library to Shellcode Loader

Speedy probe-based UDP service scanner

A collection of DPAPI hunting and parsing BOFs

MacOS Shared Library to Shellcode Loader

A cross-platform C++ framework for building Windows shellcode

LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 30+ other AI services in seconds