Raphael

fireELF. fireELF - Fileless Linux Malware Framework

mXtract. mXtract - Memory Extractor & Analyzer

postshell. PostShell - Post Exploitation Bind/Backconnect Shell

dll-hijacking. dll proxying

DEScrypt-CPU-Collision-Cracker. DEScrypt CPU Collision Cracker

madlib. PAM Backdoor

ddoor. DDoor - cross platform backdoor using dns txt records

Zimbra-RCE. Zimbra RCE PoC - CVE-2019-9670 XXE/SSRF

patchy. Automated Persistence and Lateral Movement using GCP Patch Management

RSS-Reader. Modular RSS Reader with an easy to read and navigate interface.

Safe-XOR-implementation. A "safe" implementation of XOR made to stop frequency analysis which is a weakness of the XOR cipher

AddOnlyPrimes. A highly-efficient non-constrained prime number generator that only adds

nosferatu. Lsass NTLM Authentication Backdoor

interactsh-mcp. MCP server wrapping ProjectDiscovery's Interactsh. Lets LLM agents mint OOB callback URLs and poll for interactions to confirm SSRF, log4shell, blind XSS, DNS exfil, etc. Works with the public oast.* rotation or any self-hosted server (token-auth supported).

ip-range-scanner. C++

demorepo1. Python

rek7.

Amass. In-depth Attack Surface Mapping and Asset Discovery