Evade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.

The code I write in my blog

AppLocker-Based EDR Neutralization

Serverless AITM Simulation Framework for Entra ID and M365

A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+SID), PKINIT authentication, and NT hash extraction via UnPAC…

In-memory hiding technique

Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.

A XLL python script that automates the techniques based on Octoberfest7 XLL_Phishing repo

RISC-V Virtual Machine

Basic webhook container for Mythic 3.0.0

This repository is for the Testing ASP.NET ViewState with YSoNet (YSoSerial.NET) workshop.

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

A C# utility for interacting with SCOM

converts sRDI compatible dlls to shellcode

Various tips & tricks

Python based tool for generating Shellcode from PIC C

Easy to deploy SCOM setup that makes use of Terraform and Ansible.

Windows Session Hijacking via COM

RDP Bitmap Cache parser

Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.

A tool to easily perform GitHub Device Code Phishing on red team engagements

Using Chromium-based browsers as a proxy for C2 traffic.

A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.

EvilMist is a collection of scripts and utilities designed to support cloud penetration testing & red teaming. The toolkit helps identify misconfigurations, assess privilege-escalation paths, and s…

Templates for developing your own listeners and agents for AdaptixC2.