Dump protected files (SAM,SYSTEM,SECURITY) by parsing the raw NTFS partition

Wan: Open and Advanced Large-Scale Video Generative Models

Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑…

Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.

SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform (WFP). This version fo…

Proof-of-Concept tool for extracting NTLMv1 hashes from sessions on modern Windows systems.

Evasion kit for Cobalt Strike

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.

Terminate AV/EDR leveraging BYOVD attack

Get up and running with OpenAI gpt-oss, DeepSeek-R1, Gemma 3 and other models.

Proof of Concepts code for Bring Your Own Vulnerable Driver techniques

Dumping App Bound Protected Credentials & Cookies Without Privileges.

A simple tool to find dangling CNAMEs

Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion

Exploiting the KsecDD Windows driver through Server Silos

Weaponizing DCOM for NTLM Authentication Coercions

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabil…

🪅 Windows User Space Emulator

early cascade injection PoC based on Outflanks blog post

AIDA64DRIVER Elevation of Privilege Vulnerability

Fully working kernel-mode VAC bypass

In-depth ldap enumeration utility

Nameless C2 - A C2 with all its components written in Rust

A cross-platform rust no-std library for verifying and extracting signature information from PE files.

A customizable and powerful penetration testing reporting platform for offensive security professionals. Simplify, customize, and automate your pentest reports with ease.

Python tool to check rootkits in Windows kernel