365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

Lifetime AMSI bypass

A simple command line tool to invoke the Azure Resource Manager API

Remote Administration Tool For Windows C# (RAT)

A server for exchanging OAuth Codes for Tokens

Tool aided persistence via Windows URI schemes abuse

Reverse Shell in Shortcut File (.lnk)

Browser In The Browser (BITB) Templates

Replace any XMR BTC ETH address in clipboard with yours. C#

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

Disable WD using VBS

CORS "anywhere" proxy in a Cloudflare worker. DEMO at: https://test.cors.workers.dev/

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

A discord token grabber, crypto wallet stealer, cookie stealer, password stealer, file stealer etc. app written in Python.

Simple class to search and upload files

A tool for automatizing the DLL Proxying. Just specify the original DLL and your payload, and you are done.

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

A python program that randomly generates Ethereum private keys, checks the contents of the wallet and prints any non-zero results. A tool to make you reconsider, incase you still believe in address…

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

Ready to go Phishing Platform

Reverse shell using Windows Registry files (.reg)

Simple Exploit Builder Written In C# To Simplify Payload Creation

Research into Undocumented Behavior of Azure AD Refresh Tokens

File grabber written on c++

The Havoc Framework.

Hidden miner builder

Web browser forensics for Google Chrome/Chromium