A Dead Simple VPN.

Direct Memory Access (DMA) Attack Software

Simple (relatively) things allowing you to dig a bit deeper than usual.

MemProcFS

Hiding kernel-driver for x86/x64.

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

TCP/UDP port mapping for full cone NAT

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

A .NET Runtime for Cobalt Strike's Beacon Object Files

A library for loading dll module bypassing windows PE loader from memory (x86/x64)

Red Team C code repo

PoC for CVE-2021-3156 (sudo heap overflow)

Tunnel TCP connections through ICMP.

Execute shellcode from a remote-hosted bin file using Winhttp.

Shellcoding utilities

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。

An easily modifiable shellcode template for Windows x64 written in C

D-Link firmware decryption PoC

C or BOF file to extract WebKit master key to decrypt user cookie

Reflective DLL loading of your favorite Golang program

Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary process.

Cobalt Strike Beacon Object Files

Perform DCSync operation without mimikatz

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010 editor

One DLL to redirect them all to a SOCKS5 server.

With xshellex you can paste any kind of c-shellcode strings in x64dbg, ollydbg & immunity debugger

Postgres Extension to Execute Shellcodes