Stars
a "Proof of Concept or GTFO" mirror with an extensive index with also whole issues or individual articles as clean PDFs.
This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".
A curated list of awesome resources related to anti virtualization techniques
InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.
Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)
Whitelisting LD_PRELOAD libraries using LD_AUDIT
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
A friendly car security exploration tool for the CAN bus
Webbased old-school Amiga music tracker in plain old javascript - Plays and edits Amiga Mod files and FastTracker XM files
Aggressor scripts for use with Cobalt Strike 3.0+
lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.
Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scenarios.
Continuation of the Bash-based checksec, maintained for those preferring a shell script version.
Run PowerShell with rundll32. Bypass software restrictions.
Python script that generates nft maps of ip address blocks and corresponding geolocation. This data is taken from db-ip.com, so yo don't have to worry about accepting any EULA.
A system for automatically configuring mutt and isync with a simple interface and safe passwords
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.
CAN Commander is a comprehensive tool designed for the reverse engineering of CAN (Controller Area Network) bus systems. This project aims to provide a robust platform for automotive enthusiasts, e…
Port of Cobalt Strike's Process Inject Kit
A BOF to enumerate system process, their protection levels, and more.
A more stealthy variant of "DLL hollowing"