TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

A little tool to play with Windows security

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

A tool to dump the login password from the current linux user

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

nginx WebShell/内存马，更优雅的nignx backdoor

Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.

Generic PE loader for fast prototyping evasion techniques

Zombie Ant Farm: Primitives and Offensive Tooling for Linux EDR evasion.

ApexLdr is a DLL Payload Loader written in C

Socket over DNS tunnel

dns tunnel C2

How to hide a hook -- A hypervisor for rootkits. Phrack 69

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Some ways to inject a DLL into a alive process

peinjector - MITM PE file infector

Linux kernel rootkit

LoadLibrary for Children's Paradise

A C library for creating and using TCP/IP packets with raw network sockets

An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

PoC of the communication channel implemented over DNS protocol

Implant drop-in for EDR testing

Post-exploitation and evasion research toolkit for Linux.

Linux下应用层注入/hook技术实现端口复用

SSH man-in-the-middle tool

Code Injector Using Code Caves