forkhelpburn / rpocket-Shellcode-Memory-Fluctuation
Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.
forkhelpburn / rpocket-Shellcode-Memory-Fluctuation
SelfGeckoBoiler / rpocket-team-Python-Memory-Forge
Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items
TwoSevenOneT / PhantomBuffer
EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)
redteamfortress / KillerLand
Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
SilentisVox / SyscallRevenant
Clean Indirect Syscalls with Syscall Tampering.
kamalx06 / TornadoC2
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
SnailSploit / Claude-Red
claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
ithewei / libhv
🔥 比libevent/libuv/asio更易用的网络库。A c/c++ network library for developing TCP/UDP/SSL/HTTP/WebSocket/MQTT/Redis client/server.
Trusted-AI / adversarial-robustness-toolbox
Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
chriskohlhoff / asio
Asio C++ Library
boostorg / beast
HTTP and WebSocket built on Boost.Asio in C++11
oliver006 / redis_exporter
Prometheus Exporter for Valkey & Redis Metrics. Supports Valkey 9.x, 8.x, 7.x and various Redis versions
fasiondog / hikyuu
An open-source, high-performance quantitative trading framework in C++/Python focused on strategy analysis and backtesting Trading model R&D · Ultra-fast engine · Efficient backtesting
Kkevsterrr / geneva
automated censorship evasion for the client-side and server-side
joeycastillo / Sensor-Watch
A board replacement for the classic Casio F-91W wristwatch
thestk / rtaudio
A set of C++ classes that provide a common API for realtime audio input/output across Linux (native ALSA, JACK, PulseAudio and OSS), Macintosh OS X (CoreAudio and JACK), and Windows (DirectSound, ASIO, and WASAPI) operating systems.
potato-security / PotatoTool
这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.
Tylous / SourcePoint
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
Moekotori / ECHO
The Bit-Perfect Bridge to Your Sonic Multiverse.
ybdt / RuiningLoader
An Adaptix Loader with Advanced Evasion, Such as Phantom DLL Hollowing | Stack Spoof | Sleep Mask | CFG Bypass | CET Bypass
ttlns / Selenium-Driverless
a stealthy browser automation framework
OpenMPT / openmpt
Official read-only git mirror of the OpenMPT and libopenmpt subversion repository at https://source.openmpt.org/. This repository may occasionally get rebased without further notice when subversion revision properties (commit message) get fixed in recent history after the fact. Be sure to rebase often in case you clone or fork it.
JoasASantos / Red-Team-Exercises
—
basionwang-bot / HermesPet
让 AI 住在你 MacBook 的刘海里 · 零依赖开箱即用 · 多引擎并行的桌面 AI 伴侣（Swift 6 / SwiftUI / macOS 14+）
JoasASantos / SysWhispers4
AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64
vixcpp / vix
A modern C++ runtime for building fast and reliable applications.
tyeurada / edrEvasionWorkshop
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.
DeathShotXD / 0xM0nCrush
Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.
eldarshiraliyev / BugScanner
🐛 Advanced web vulnerability scanner with 5-rule false-positive reduction, WAF evasion, and modern HTML reports
notactuallytreyanastasio / shoehorn
—
0xaled / Vipere
BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native ETW evasion. For Cobalt Strike & Adaptix.
budisetiawan1889 / Fleasion-2-Fishstrap-Forge
Fleasion to Fishstrap JSON Converter Tool 2026
VoidSecSoftwares / voidsyscall
Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.
VANdexj / OmniRisk
OmniRisk: omnidirectional trajectory-risk learning for agile quadrotor dynamic avoidance. One forward pass scores every maneuver onboard; real-world evasion at up to 15 m/s.
St0rn / SigLens
SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detections down to precise offsets and maps them to PE sections, RVA, VA, hexdump, and nearby strings, making evasion faster and easier. Built for fast AV signature triage on Windows
DeathShotXD / 0xCr0ssCrush
Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.
Divine16 / Sanctions-screening-benchmark
Reproducible benchmark for sanctions name-screening effectiveness. Measures recall across 18 documented classes of name variation — transliteration, Unicode homoglyph evasion, OCR degradation — with synthetic negative controls
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
mountainview8868 / Forensic-accounting-audit-shield
Automated Forensic Accounting & Financial Fraud Detection Engine native in Excel. Built-in Benford's Law, duplicate payment scanning, Z-score analysis, and threshold evasion detection. 100% offline, privacy-first audit tool for internal auditors and CFOs.
abdulwasio2521 / javascript-rock-paper-scissors-game
—
AbegAshford / fleasion-rivals-configs
A collection of Fleasion JSON mod configs for Roblox Rivals. Includes skins, sounds, textures, skyboxes, wraps, and more.
abdulwasio2521 / currency-converter
A lightweight, real-time currency converter web application built with vanilla JavaScript. It fetches live exchange rates using a free API, supports over 150 currencies, and features an intuitive interface with dynamic flag updates.
security-attack / RingKiller
RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminateProcess. EDR/AV termination primitive. Lab only.