A tiling window manager for macOS based on binary space partitioning

A little tool to play with Windows security

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals…

Small and highly portable detection tests based on MITRE's ATT&CK.

hydra

A repository for learning various heap exploitation techniques.

open-source IEEE 802.11 WiFi baseband FPGA (chip) design: driver, software

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

Unbound is a validating, recursive, and caching DNS resolver.

Simple (relatively) things allowing you to dig a bit deeper than usual.

Platform for Architecture-Neutral Dynamic Analysis

Exploring possibilities of ESP32 platform to attack on nearby Wi-Fi networks.

A post exploitation framework designed to operate covertly on heavily monitored environments

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

The swiss army knife of LSASS dumping

Open-Source Shellcode & PE Packer

Sysmon for Linux

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir…

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

Connect like there is no firewall. Securely.

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

ESP8266 Analog Broadcast Television Interface

A tool to kill antimalware protected processes

Windows Privilege Escalation from User to Domain Admin.

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

TrevorC2 is a legitimate website (browsable) that tunnels client/server communications for covert command execution.