Advanced Windows PE Injector (x86/x64, C++17, MSVC 19+). Manual mapping of DLLs (Run export call) + full EXE injection into svchost.exe. Direct syscall stubs, PPID spoofing (explorer.exe), randomiz…

Red Team Arsenal - a comprehensive collection of tools, scripts, and techniques for conducting red team operations and adversary simulations, including custom beacons, malleable C2 profiles, aggres…

Remote administration toolkit for windows, based on Hidden VNC: file manager, keystroke logger, powershell

EDR & AV Bypass Arsenal— a comprehensive collection of tools, patches, and techniques for evading modern EDR and antivirus defenses.

Win64 Keylogger: logs input, chats, URLs, passwords, stealthy, C API, no external dependencies.

Chromium extension + loader with command support for system control + 2 Node JS servers

Collection of scripts and a binary agent for automated reconnaissance scanning, SSH/Telnet propagation, and C2 control

Linux Rootkit (x86-64 / ARM64) that stealth hides processes, files, and sockets, hooks syscalls, encrypts traffic, and bypasses SELinux / AppArmor.

PoC shellcode injector using clean syscalls to bypass user-mode hooks in ntdll.dll

Modular C2 loader featuring dynamic function encryption, in-memory payload support, and a covert DoH command channel, configurable via a Python builder and a Node.js web panel.

Framework for creating and managing a botnet