The fastest path to AI-powered full stack observability, even for lean teams.

World's fastest and most advanced password recovery utility

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

A little tool to play with Windows security

build-once run-anywhere c library

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

SSH tarpit that slowly sends an endless banner

A command line tool that recreates the famous data decryption effect seen in the 1992 movie Sneakers.

Direct Memory Access (DMA) Attack Software

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Keepalived

Porting Windows Dynamic Link Libraries to Linux

A tool to dump the login password from the current linux user

The only tool/technique to punch holes through firewalls/NATs where multiple clients & server can be behind separate NATs without any 3rd party involvement. Pwnat is a newly developed technique, ex…

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Transparently tunnel your IP traffic through ICMP echo and reply packets.

generate CobaltStrike's cross-platform payload

GodMode9 Explorer - A full access file browser for the Nintendo 3DS console

A flexible tool for redirecting a given program's TCP traffic to SOCKS5 or HTTP proxy.

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Shell script compiler

Advanced CPU-based password recovery utility

Go bindings for creating BPF programs.

A post exploitation framework designed to operate covertly on heavily monitored environments

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir…

Windows Event Log Killer

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

LSASS memory dumper using direct system calls and API unhooking.