#
Lists (32)
Awesome Lists
3 repositories
Blue Team
26 repositories
Cloud Security
9 repositories
Dotfiles
1 repository
Finance Tools
5 repositories
Gaming
10 repositories
GenAI - Audio/Visual
1 repository
GenAI - LLMs
10 repositories
Homelab
6 repositories
Interesting Shit
31 repositories
Linux Utilities
10 repositories
MacOS Utilities
16 repositories
Mobile
1 repository
Networking Tools
2 repositories
OSINT
4 repositories
Other Dev stuff
7 repositories
Programming Languages
2 repositories
Red Team - AI
3 repositories
Red Team - Credential Harvesting
6 repositories
Red Team - Evasion
11 repositories
Red Team - Initial Access
11 repositories
Red Team - Persistence
9 repositories
Red Team - Privilege Escalation
12 repositories
Red Team - Recon
20 repositories
Red Team - Social Engineering
3 repositories
Resume Templates
1 repository
Reverse Engineering
2 repositories
SAST / DAST
7 repositories
Themes
2 repositories
Vulnerable Labs
2 repositories
Web Development
10 repositories
Windows Utilities
11 repositories
Starred repositories
154
stars
written in C
Clear filter
A shellcode function to encrypt a running process image when sleeping.
An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security
baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability
Cobalt Strike BOF for evasive .NET assembly execution
Gain observability into any Linux command or application with no code modification
Insecure Programming by Example - Teach yourself how buffer overflows, format strings, numeric bugs, and other binary security bugs work and how to exploit them
Bypass UAC at any level by abusing the Program Compatibility Assistant with RPC, WDI, and more Windows components
Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
BPFDoor Source Code. Originally found from Chinese Threat Actor Red Menshen
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.
Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows
Windows USB Driver for Sony DualShock 3 Controllers
Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak
DLL Password Filter Implant with Exfiltration Capabilities
Get your data from the resource section manually, with no need for windows apis
NGINX module to allow for RCE through a specific header