Home

CheckPlease is the go-to repository for the newest implant security, targeted payload, and sandbox detection modules. Each check is written in:

• PowerShell
• Python
• Go
• Ruby
• Perl
• C
• C#

Every module functions as a standalone "check." All checks can be run with command-line arguments, like so:

<module> <optional arguments>

This repository is for defenders to harden their sandboxes and AV tools, malware researchers to discover new techniques, and red teamers to get serious about their payloads.