Wireguard auto-installer for Ubuntu, Debian, CentOS and Fedora

Polymorphic PE rewriter for Windows x64 , rewrites binaries into semantically identical but byte-different variants

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理

Fast C++ logging library.

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

WebChat using .NET Core, SignalR, Rest API, React JS

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

Powershell implementation of a novel technique. Invoke-GPTObfuscation is a PowerShell Obfuscator that utilizes OpenAI (and other APIs) to obfuscate your PowerShell penetration testing code, malware…

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

PE file viewer/editor for Windows, Linux and MacOS.

collection of apis used in malware development