MochaByte

CTFPacker. Shellcode packer for CTFs and pentest / red team exams aiming for AV evasion!

Elyzer. Elyzer is an email header analyzer, written in python, capable of detecting potential spoofing attempts.

vmkit. A header-only, freestanding C++20 template for IR-bytecode VM loaders

TrampoLatte. A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow

MochiLdr. Reflective x64 Loader written in C/ASM

MochiMapper. Minimal in-memory PE loader

citrix-netscaler-forensics. This repository contains a list of artifacts to search for while performing a forensic investigation on Citrix Netscaler appliances.

Elixir. Elixir is a fast multi-function DNS Enumeration, Subdomain Enumeration and Attack Surface Mapping tool.

Burp2Brute. Convert Burp Suite captures to Brute Ratel C4 malleable profiles

Orion. Orion is a TCP/IP Forensics Tool, written in C, capable of detecting malicious processes / connections on windows hosts by using the VirusTotal API.

ChaCha20. ChaCha20 encryption implemented in C/C++ (Header Only)

DumbETW. A proof of concept ETW consumer that captures userland events in real time, displays them, and saves them into an .etl file

MyOSEPToolBox. My stuff for the OSEP course & exam

Ultimate-RAT-Collection. For educational purposes only, exhaustive samples of 450+ classic/modern trojan builders including screenshots.