SAM Dumping in C#

Dynamic shellcode loader with sophisticated evasion capabilities

Take Control Over Windows Defender

SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.

我的 ComfyUI 工作流合集 | My ComfyUI workflows collection

The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface.

Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. Export results as BloodHound‑…

用于生成各类免杀webshell

Safe Harbor is a BOF that streamlines process reconnaissance for red team operations by identifying trusted, low-noise targets to maintain stealth and robust OPSEC.

SafeHarbor revamped with Direct Syscalls using InlineWhispers3

IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare

Extract Windows Defender database from vdm files and unpack it

Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin rights required.

RunPE implementation with multiple evasive techniques

Hex-Rays OLLVM Deobfuscator and MicroCode Explorer

Lateral Movement Bof with MSI ODBC Driver Install

Windows protocol library, including SMB and RPC implementations, among others.

给woodpecker框架量身定制的ysoserial

A pointer encryption library intended for Red Team implant design in Rust.

Module to compile powershell scripts to executables

利用AI大模型，一键生成高清短视频 Generate short videos with one click using AI LLM.

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

获取chrome 浏览器记录

💫 Toolkit to help you get started with Spec-Driven Development

Python implementation of GhostPack's Seatbelt situational awareness tool

BYD (Build Your Dream) Car Repair Manuals and Factory Images 比亚迪汽车的维修手册和刷机资料

Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.

IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 - auth-url injection, CVE-2025-1097 - …