midnite_runr

the-backdoor-factory. Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

SigThief. Stealing Signatures and Making One Invalid Signature at a Time

BDFProxy. Patch Binaries via MITM: BackdoorFactory + mitmProxy.

fido. Teaching old shellcode new tricks

recomposer. Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

shellcode_retriever. POC of code that downloads and executes shellcode in memory.

backdoor-pyc. Patch pyc files with your code. Fairly lame.

encryptAgit. Encrypt your git repo...

Shmoocon2016. Materials from presentation

backdoor-apk. backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

PlagiarismChecker. Quick script to check for plagiarism between two documents

offensiveinterview. Interview questions to screen offensive (red team/pentest) candidates

Winpayloads. Undetectable Windows Payload Generation

sulley. A pure-python fully automated and unattended fuzzing framework.

kyphosis. Find what's not loaded in memory on an executable (OS X/iOS only)

proxycannon-ng. A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference

GhostInTheNet. Ultimate Network Stealther that makes Linux a Ghost In The Net and protects from MITM/DOS/scan

MITMf. Framework for Man-In-The-Middle attacks

EquationGroupLeak. Archive of leaked Equation Group materials

apkminer. Parallel APK vulnerability analyzer

www.rootkit.com. www.rootkit.com users section mirror, sql database dump, and a few other files/rootkits.

osx_mach_stuff. Personal Exploration of Mach Programming

Ironsquirrel. Encrypted exploit delivery for the masses

Zines. Mirror of my favourite hacking Zines for the lulz, nostalgy, and reference

peinjector. peinjector - MITM PE file infector

docker-releases. DockerFIles for BDF/BDFProxy

HackBar. HackBar plugin for Burpsuite v1.0

english-words. :memo: A text file containing 479k English words for all your dictionary/word-based projects e.g: auto-completion / autosuggestion

PyMachi. A Secure Opensource Remote Admin Tool (SO RAT. MUCH SECURE)

TitanHide. Hiding kernel-driver for x86/x64.

dllinjector. dll injection tool that implements various methods

OSX-KVM. Running Mac OS X El Capitan and macOS Sierra on QEMU/KVM

python-dll-injection. Python toolkit for injecting DLL files into running processes on Windows

osxcollector. A forensic evidence collection & analysis toolkit for OS X

inmet. A multi-purpose meterpreter executable (inline, many transports, msfpayload)

knockknock. Who's there?

Krakatau. Java decompiler, assembler, and disassembler

trigen. Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.

LipoCram. Cram data into FAT Binaries

chatAI_prompts.

sslstrip. A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.

google-security-research. Automatically exported from code.google.com/p/google-security-research

apk_binder_script. apk binder script

CVE-2015-7547. Proof of concept for CVE-2015-7547

ScyllaHide. C++

koekiemonster. Load cookies from FireFox, to be used by Requests etc.

Pazuzu. Pazuzu: Reflective DLL to run binaries from memory

DerbyCon2018Slides. Slides from my

utimaco. Tools for reverse engineering the Utimaco Firmware

Bounty-EncryptAGit. Can you crack it?

unix. Mirror of the Restoration of 1st Edition UNIX kernel sources from pdf document.

minimalcontrolflow. The least amount of work to map out program control flow

pygpmanager. Simple password manager that uses python, XML and cryptostuff

osquery. SQL powered operating system instrumentation, monitoring, and analytics.