Stars
Detection-aware BloodHound attack-path scoring - find the quietest route to your objective, calibrated across audit/EDR/SIEM tiers.
POC tool for ResetNightmare (CVE-2026-27912)
Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, SIP hijacking across 19 file types, WinVerifyTrust FinalPolic…
Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session. Installable via MMRL.
Tips on how to write exploit scripts (faster!)
SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled validation, simulators, and CLI, TUI, and web interfaces. D…
ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments
A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injection, and inverted function table collapse.
PWNCUBE v1.0 is a Cubesat hardware based platform for aerospace cybersecurity research
Active Directory security-assessment toolkit in Rust — PingCastle-class audit + authorized red-team validation, on a from-scratch DCE/RPC · NTLM · SMB2 · Kerberos stack. One static binary, from Kal…
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
Post-exploitation and evasion research toolkit for Linux.
Access All Networks: an offensive multitool against 802.1X
An OSINT Mapping tool for research.
A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more
Communicate with Airoha-based Bluetooth devices using the RACE protocol via Bluetooth and USB.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works w…
A WiFi security auditing software mainly based on aircrack-ng tools suite
wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
Windows User-Mode Shellcode Development Framework (WUMSDF)
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
Review-first terminal diff viewer for agentic coders
ShortDot SA zone abuse evidence — 6,242,647 domains across .icu, .bond, .cyou, .sbs, .cfd, .buzz, .qpon. 237,894 classified IOC (153,775 HIGH), 6,169 feed/intel confirmed. Daily updated IOC feeds, …