Isolated VM environment for running Claude Code and Codex

Undetectable offensive toolkit inside Chrome

LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

npx ccusage

Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by BeichenDream.

Beacon Object File (BOF) for Windows Session Hijacking via IHxHelpPaneServer COM

Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable API calls.

Beginner, advanced, expert level Rust training material

MemProcFS

Linux Shared Library to Shellcode Loader

Rust Armory - Cobalt Strike Beacon Object Files (BOFs) in Rust for situational awareness, remote operations, and post-exploitation tradecraft (Codename: Armory)

Subcommand to show result of macro expansion

A reverse-engineering agent for IDA Pro and Binary Ninja

PDB file inspection tool

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

BOF to steal browser cookies & credentials

Cobalt Strike BOF for evasive .NET assembly execution

Fake "backed" .NET execution (ala xforcered's being a good CLR host) + BOF inline execution + Schizophrenic code quality

A sandbox environment designed for loading, running and profiling a wide range of files, including machine learning models, ELFs, Pickle, Javascript and more

Tool for building Kubernetes attack paths

Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall

Load a dynamic library from memory by modifying the native Windows loader

sigreturn-oriented(SROP) based sleep obfuscation poc for Linux

A Model Context Protocol (MCP) server for automating Ludus v1 and v2 cyber range environments through AI assistants. 190+ tools for range management, blueprints, groups, templates, scenarios, and S…

AppLocker-Based EDR Neutralization

Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.

ASSVD

Extremely Fast Compression algorithm