A transparent proxy system for inspecting, debugging, and modifying any traffic from the agent container, focused on LLM-based coding agents. Works with Claude Code, Codex CLI, Cursor, Aider, and a…

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Execute unmanaged Windows executables in CobaltStrike Beacons

miscellaneous scripts and programs

Useful scripts for WinDbg using the debugger data model

Patch AMSI and ETW

Run Your Payload Without Running Your Payload

DLL sideloading techniques for stealthy payload execution on Windows

(Demo) 3rd party agent for Havoc

Replace the .txt section of the current loaded modules from \KnownDlls\

Another Windows Local Privilege Escalation from Service Account to System

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSigners

Automating situational awareness for cloud penetration tests.

Win32 and Kernel abusing techniques for pentesters

Advanced keyboard-walk generator with configureable basechars, keymap and routes

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

Syscall process scanner