Comfortably monitor your Internet traffic 🕵️‍♂️

Terminal session recorder, streamer and player 📹

Fast, collaborative live terminal sharing over the web

Rapidly Search and Hunt through Windows Forensic Artefacts

Rust for malware Development is a repository for advanced Red Team techniques and offensive malwares & Ransomwares, focused on Rust 🦀

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

802.11 Attack Tool

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Evasion by machine code de-optimization.

FaceDancer is an exploitation tool aimed at creating hijackable, proxy-based DLLs by taking advantage of COM-based system DLL image loading

LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.

Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀

Threadless Process Injection through entry point hijacking

Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.

A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTAPI for various operations.

Direct access to NTFS volumes

Memory Obfuscation in Rust

Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)

find dll base addresses without PEB WALK

Linker for Beacon Object Files

A reflective DLL development template for the Rust programming language

A hoontr must hoont

Locate dlls and function addresses without PEB Walk and EAT parsing

Faster version of `symchk /om` for generating PDB manifests of offline machines

cpp-amalgamate recursively combines C++ source files and the headers they include into a single output file

Solemn is a lightweight command-line tool for Windows that automates adding drivers to the HVCI (HvciDisallowedImages) custom blocklist