A repository containing tools used for unpacking and deobfuscating .NET applications protected with ConfuserEx

Country/Provider to IPv4 Address Lookup

Share threat intelligence and detect tools about APT "NightEgle" (APT-Q-95)

LinkedIn recon the easy way

Extracts hashes and obsfucated strings from BPFDoor samples

A list of python tools to help create an OPSEC-safe Cobalt Strike profile.

Samples for midPoint project

My most up to date dotfiles

Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator

CCADB CSV reports and library for parsing them

Awesome Docker Compose samples

WMI virus, because funny

This is a repository to experiment with MCP for security

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

Pwny is an implementation of an advanced payload written in pure C and designed for portability and extensibility.

Extract and execute a PE embedded within a PNG file using an LNK file.

In-Memory Rootkit For Linux

SeaShell Framework is an iOS post-exploitation framework that enables you to access the device remotely, control it and extract sensitive information.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization,…

Extracted Yara rules from Windows Defender mpavbase and mpasbase

Hide shellcode by shuffling bytes into a random array and reconstruct at runtime

CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

Code samples that serve as references for Windows API functions

A (quite) simple steganography algorithm to hide shellcodes within bitmap image.

Heavily obfuscated ASP web shell generation tool.

Non-linear Mixed Boolean-Arithmetic Expressions

Various ways to execute shellcode