Stars
A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more
Communicate with Airoha-based Bluetooth devices using the RACE protocol via Bluetooth and USB.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works w…
A WiFi security auditing software mainly based on aircrack-ng tools suite
wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain
Windows User-Mode Shellcode Development Framework (WUMSDF)
Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.
Review-first terminal diff viewer for agentic coders
ShortDot SA zone abuse evidence (6.2M domains). Automated Threat Intelligence & daily updated IOCs for .icu, .bond, .cyou, .sbs, .cfd, .buzz, .qpon.
EmailCrawl - is a professional-grade OSINT (Open Source Intelligence) tool designed for advanced email address extraction through comprehensive web crawling. Built for cybersecurity professionals, …
PhantomFS is a Windows honeypot that projects convincing decoy files — credentials, financials, SSH keys — into a virtual directory via ProjFS, then fires instant Event Log and Toast alerts the mom…
📓 Reference guide for scanning networks with Nmap.
A desktop operator console for Sliver C2, built with Wails. Provides a native, lightweight GUI interface for Sliver by directly interfacing with its gRPC service no proxies or protocol reimplementa…
A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Sleep Obfuscation.
HaXder is an advanced, asynchronous reconnaissance framework for security researchers. Discover subdomains, map attack surfaces, fingerprint technologies, detect subdomain takeovers, and enumerate …
Dump TGTs remotely and convert Windows' klist binary output to ccache.
Hunt down 840+ social media accounts using AI
Tool to find common vulnerabilities in cryptographic public keys
KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.
Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failure modes.
Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_main agent, PEB-walked APIs, WinHTTP comms.
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…
A list of Cheatsheet compiled by CloudBreach Team
Self-hosted Microsoft 365 security operations dashboard — aggregates Defender XDR, Entra ID Protection, Intune, Compliance and more into one place.
Built a cloud-based honeynet in Microsoft Azure to attract and analyze real-world cyber attacks. Configured a deliberately vulnerable Windows VM, ingested logs into Microsoft Sentinel (SIEM), and u…