Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...

Python SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails, loadbalancing and logging. [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthr…

POC of modifying YARA signautre for Havoc C2

A red teaming attack paradigm against AI Agents

PII Masker is an open-source tool for protecting sensitive data by automatically detecting and masking PII using advanced AI, powered by DeBERTa-v3. It provides high-precision detection, scalable p…

tgtdelegation is a Beacon Object File (BOF) to obtain a usable TGT via the "TGT delegation trick"

We want to create a Python PLC honeypot which support multiple primary OT communication protocols such as Modbus-TCP and Siemens-S7Comm. The system will integrate essential components: PLC emulator…

LLM Supported Attack Scenario Creator from Code Review

The all-in-one Desktop & Docker AI application with built-in RAG, AI agents, No-code agent builder, MCP compatibility, and more.

VMware macOS utilities

A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders implemented by C2 beacons) or other problematic executables tha…

Automatically created C2 Feeds

KQL Queries. Microsoft Defender, Microsoft Sentinel

lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.

Collection of scripts for testing M365 subscriptions

C2 Infrastructure Automation

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

Malware?

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

C++ python bytecode disassembler and decompiler

Collection of awesome LLM apps with AI Agents and RAG using OpenAI, Anthropic, Gemini and opensource models.

PoC for using MS Windows printers for persistence / command and control via Internet Printing

Conference presentation slides

The hacker's BLE (bluetooth low energy) browser terminal app

RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust 🦀

Offline command line tool that searches for GTFOBins binaries that can be used to bypass local security restrictions in misconfigured systems.

Make your Slack group a C2 server :)

A Python pickling decompiler and static analyzer