A Reflective Loader for macOS

Stage 0

A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions

A collection of position independent coding resources

IoM implant, C2 Framework and Infrastructure

Cobalt Strike Malleable C2 Design and Reference Guide

Port of Cobalt Strike's Process Inject Kit

Extracting Clear Text Passwords from mstsc.exe using API Hooking.

Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)

Run docker & LXC images without docker or LXC program, without kernel features support, even without root privileges!

🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Shellcode loader generator with multiples features

Tool to decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface with path validation and encryption protections.

This project steals important data from all chromium and gecko browsers installed in the system and gather the data in a stealer db to be exfiltrated out. A powerful Browser Stealer

This project contains an open source RAT (Remote Access Trojan).

Activation Context Hijack

A BOF to enumerate system process, their protection levels, and more.

"Service-less" driver loading

A collaborative, multi-platform, red teaming framework

A Mythic Agent written in PIC C.

Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]

Collect Windows telemetry for Maldev

64-bit, position-independent implant template for Windows in Rust.

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

Tools for instrumenting Windows Defender's mpengine.dll

Extracted Yara rules from Windows Defender mpavbase and mpasbase

This is Growtopia stealer save.dat file, Discord Webhook sends a file, mac address, IP info, city, and more...

Growtopia stealer written at C# that steal save.dat, mac address, IP information, etc...