SnailSploit / Claude-Red

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

TwoSevenOneT / PhantomBuffer

EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)

redteamfortress / KillerLand

Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.

SilentisVox / SyscallRevenant

Clean Indirect Syscalls with Syscall Tampering.

fasiondog / hikyuu

An open-source, high-performance quantitative trading framework in C++/Python focused on strategy analysis and backtesting Trading model R&D · Ultra-fast engine · Efficient backtesting

oliver006 / redis_exporter

Prometheus Exporter for Valkey & Redis Metrics. Supports Valkey 9.x, 8.x, 7.x and various Redis versions

joeycastillo / Sensor-Watch

A board replacement for the classic Casio F-91W wristwatch

AbegAshford / fleasion-rivals-configs

A collection of Fleasion JSON mod configs for Roblox Rivals. Includes skins, sounds, textures, skyboxes, wraps, and more.

ithewei / libhv

🔥 比libevent/libuv/asio更易用的网络库。A c/c++ network library for developing TCP/UDP/SSL/HTTP/WebSocket/MQTT/Redis client/server.

chriskohlhoff / asio

Asio C++ Library

Kkevsterrr / geneva

automated censorship evasion for the client-side and server-side

thestk / rtaudio

A set of C++ classes that provide a common API for realtime audio input/output across Linux (native ALSA, JACK, PulseAudio and OSS), Macintosh OS X (CoreAudio and JACK), and Windows (DirectSound, ASIO, and WASAPI) operating systems.

Tylous / SourcePoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

ybdt / RuiningLoader

An Adaptix Loader with Advanced Evasion, Such as Phantom DLL Hollowing | Stack Spoof | Sleep Mask | CFG Bypass | CET Bypass

OpenMPT / openmpt

Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at https://source.openmpt.org/. This repository may occasionally get rebased without further notice when subversion revision properties (commit message) get fixed in recent history after the fact. Be sure to rebase often in case you clone or fork it.

basionwang-bot / HermesPet

让 AI 住在你 MacBook 的刘海里 · 零依赖开箱即用 · 多引擎并行的桌面 AI 伴侣（Swift 6 / SwiftUI / macOS 14+）

DeathShotXD / 0xM0nCrush

Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.

VANdexj / OmniRisk

OmniRisk: omnidirectional trajectory-risk learning for agile quadrotor dynamic avoidance. One forward pass scores every maneuver onboard; real-world evasion at up to 15 m/s.

St0rn / SigLens

SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detections down to precise offsets and maps them to PE sections, RVA, VA, hexdump, and nearby strings, making evasion faster and easier. Built for fast AV signature triage on Windows

mountainview8868 / Forensic-accounting-audit-shield

Automated Forensic Accounting & Financial Fraud Detection Engine native in Excel. Built-in Benford's Law, duplicate payment scanning, Z-score analysis, and threshold evasion detection. 100% offline, privacy-first audit tool for internal auditors and CFOs.

Trusted-AI / adversarial-robustness-toolbox

Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams

boostorg / asio

Boost.org asio module

Moekotori / ECHO

The Bit-Perfect Bridge to Your Sonic Multiverse.

JoasASantos / Red-Team-Exercises

—

vixcpp / vix

A modern C++ runtime for building fast and reliable applications.

tyeurada / edrEvasionWorkshop

Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.

eldarshiraliyev / BugScanner

🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports

notactuallytreyanastasio / shoehorn

—

0xaled / Vipere

BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native ETW evasion. For Cobalt Strike & Adaptix.

budisetiawan1889 / Fleasion-2-Fishstrap-Forge

Fleasion to Fishstrap JSON Converter Tool 2026

VoidSecSoftwares / voidsyscall

Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.

DeathShotXD / 0xCr0ssCrush

Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.

Divine16 / Sanctions-screening-benchmark

Reproducible benchmark for sanctions name-screening effectiveness. Measures recall across 18 documented classes of name variation — transliteration, Unicode homoglyph evasion, OCR degradation — with synthetic negative controls

SagarBiswas-MultiHAT / The-BlackHAT-roadmap

The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources

abdulwasio2521 / javascript-rock-paper-scissors-game

—

kamalx06 / TornadoC2

Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.

abdulwasio2521 / currency-converter

A lightweight, real-time currency converter web application built with vanilla JavaScript. It fetches live exchange rates using a free API, supports over 150 currencies, and features an intuitive interface with dynamic flag updates.

security-attack / RingKiller

RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.

boostorg / beast

HTTP and WebSocket built on Boost.Asio in C++11

potato-security / PotatoTool

这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.

JoasASantos / SysWhispers4

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

HydraSoft / HydraSoft-DLL-Hijack-Scanner

HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks across your fleet.

derpsn / access-virus-ti-revive

TI Revive: Total Integration for the Access Virus TI on Windows 11, macOS and Linux - a native Virus Control plug-in and ASIO sound card, without the old Access drivers