Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins

Certighost POC

A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for quick AD enumeration.

The Arcanum Prompt Injection Taxonomy

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failover.

aider is AI pair programming in your terminal

Multi-architecture Linux privilege escalation toolkit with 24 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

PoCs and exploits for CVEs discovered by VEGA.

The world's first agentic reverse engineer.

autonomous red teaming platform; multi-agent offensive-security meta-harness

How To approach recon on real targets — from passive enumeration to origin IP discovery. Covers tools, automation, and the logic behind each phase.

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

Reversed cassandra source code for educational purposes

Enterprise NTLM Recovery Orchestrator

A WiFi security auditing software mainly based on aircrack-ng tools suite

Abusing the win32k.sys kernel callback mechanism for arbitrary code execution

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Entra ID user enumeration and auth method discovery via the public GetCredentialType API

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_main agent, PEB-walked APIs, WinHTTP comms.

On-device TTS model by Neuphonic

The only browser automation that bypasses anti-bot systems. AI writes network hooks, clones UIs pixel-perfect via simple chat.

An HTTP toolkit for security research.

Decentralized C2 framework built on libp2p

PwnPad is an affordable, hands-on hardware hacking platform built for practical learning. It features a range of challenges that walk users through key hardware security concepts, from PCB design t…

CredsHunter - Credential Hunting scripts for Windows and Linux OS

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…

Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full write-up at hiago.sh

SimpleX - the first messaging network operating without user identifiers of any kind - 100% private by design! iOS, Android and desktop apps 📱!