Stars
A centralized resource for previously documented WDAC bypass techniques
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
🪨 why use many token when few token do trick — Claude Code skill that cuts 65% of tokens by talking like caveman
KslDump — Why bring your own knife when Defender already left one in the kitchen?
A visual, example-driven guide to Claude Code — from basic concepts to advanced agents, with copy-paste templates that bring immediate value.
The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/
Shellcode IDE — makes developing and analyzing shellcode much more convenient.
A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository…
Perfect DLL Proxying using forwards with absolute paths.
CSPTPlayground is an open-source playground to find and exploit Client-Side Path Traversal (CSPT).
AdaptixC2 is a highly modular advanced redteam toolkit
Cybersecurity AI (CAI), the framework for AI Security
RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging
A command line C# REPL with syntax highlighting – explore the language, libraries and nuget packages interactively.
Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
Simple (relatively) things allowing you to dig a bit deeper than usual.
This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stage…
Bear C2 is a compilation of C2 scripts, payloads, and stagers used in simulated attacks by Russian APT groups, Bear features a variety of encryption methods, including AES, XOR, DES, TLS, RC4, RSA …
rasta-mouse / ThreatCheck
Forked from matterpreter/DefenderCheckIdentifies the bytes that Microsoft Defender / AMSI Consumer flags on.
A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
control your Linux OS computer through Telegram