Spec for the Flat Image Tree (FIT) specification

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

Gopacket is a clean Go implementation of Impacket, a library intended for working with network protocols.

Learn git by playing. A retro browser game where you type real git commands in a real terminal to solve puzzles at the Monastery of Version Control.

Beginner, advanced, expert level Rust training material

Go Dependency Analysis toolkit

A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without touching LSASS process memory.

Use LLMs to rank anything

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

Send and receive SMS messages using your Android phone programmatically via a simple HTTP API

Control your Neato vacuum locally with the fang of vacuula

A tool for analyzing the size of compiled Go binaries, offering cross-platform support, detailed breakdowns, and multiple output formats.

This is practice VM for malware development

Prompt Orchestration Markup Language

Macro-header for compile-time C obfuscation (tcc, win x86/x64)

find dll base addresses without PEB WALK

Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking

SharpSuccessor is a .NET Proof of Concept (POC) for fully weaponizing Yuval Gordon’s (@YuG0rd) BadSuccessor attack from Akamai.

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-…

x64 binary obfuscator

The Network Execution Tool

opkssh (OpenPubkey SSH)

The authentication glue you need.

This is for Ethical Use only. The default automated binaries created are all burned. I have added the script to the repo to modify certain signatures and it will still work.

WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API

🪅 Windows & Linux userspace emulator

early cascade injection PoC based on Outflanks blog post

Dynamically invoke arbitrary unmanaged code

A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities

Damn Vulnerable UEFI