Lists (18)
Starred repositories
LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loading, runtime PICO substitution, and advanced evasion techniqu…
Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.
A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real backdoor or shell.
GhostGraph-C2: Async, stealthy, modular C2 framework for red teaming and CTFs. Multi-channel fallback, encryption, obfuscation, and basic anti-analysis included.
Virtualize macOS 12 and later on Apple Silicon, VirtualBuddy is a virtual machine GUI for macOS M1, M2, M3, M4
Tool to enumerate privileged Scheduled Tasks on Remote Systems
EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.
ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.
Rust Artifact Kit is a sophisticated research framework demonstrating advanced evasion techniques through Rust-based artifact loaders.
POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY
This is the tool to dump the LSASS process on modern Windows 11
This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.
SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
old windows install sdk and an old tool by Heath Stewart called msix https://devblogs.microsoft.com/setup/patch-files-extractor/
Breakthrough Method for Agile Ai Driven Development
An interactive TUI tool to create Brute Ratel C4 profiles based on BURP browsing data.
中文古籍刻本風格直排電子書製作工具 Chinese Ancient eBooks Generator
BadAssMacros - C# based automated Malicous Macro Generator.
A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA based scripts.
iOS的越狱和非越狱环境下直接对指定地址函数进行hook的框架，支持宏定义直接切换