bt2

bt2: Blaze Telegram Backdoor Toolkit bt2 is a Python-based backdoor in form of a IM bot that uses the infrastructure and the feature-rich bot API provided by Telegram, slightly repurposing its communication platform to act as a C&C. Dependencies Telepot requests Installation $ sudo pip install...

browser-identity-attacks-matrix

Browser & Identity Attacks Matrix This repository is a collection of browser and identity attack techniques covering SaaS apps, browser-based attacks, identity providers, and phishing. It is intended to be a resource for security researchers, red/blue teams, and penetration testers to learn about...

Excalibur

Excalibur will soon be updated to utilize Metasploit over the Bashbunny. Excalibur Excalibur is an Eternalblue exploit based "Powershell" for the Bashbunny project. It's purpose is to reflect on how a "simple" USB drive can execute the 7 cyber kill chain. Excalibur may be used only for...

FlowiseAI-Critical-KillChain

FlowiseAI — Critical Kill Chain Unauthenticated Account Takeover chained with Remote Code Execution against FlowiseAI Full container compromise in under 5 seconds , zero credentials required. Kill Chain Left: FlowiseAI login page — Right: root shell via CVE-2025-59528 · uid=0root Table of Content...

BYOVD

EnPortv-Killer PoC for vulnerability in EnPortv driver from EnCase As of 2026-07-10, the driver is listed onLOLDDrivers but remains absent from Microsoft's recommended driver block rules as of 2026-07-10 Built on byovd-lib -- implements the DriverConfig trait and delegates the full BYOVD flow to...

privacy-first-network

Privacy Router Stack Whole-home VPN router with network-level kill switch - Protect every device on your network with OpenWrt, WireGuard, and AmneziaWG. No apps required. 🤖 Using an AI coding agent? Give it access to this entire repo and read AGENTS.md for guided deployment. Supports Claude, GPT,...

AD-Attack-Defense

Active Directory Kill Chain Attack & Defense Summary This document was designed to be a useful, informational asset for those looking to understand the specific tactics, techniques, and procedures TTPs attackers are leveraging to compromise active directory and guidance to mitigation, detection,...

LSTAR-EN

LSTAR - Aggressor Translated to English! By Google Translate and Deepl For the purpose of simplifying CS right-click and facilitating self-integration, refer to a large number of post-infiltration plugins Refactored and enriched host-related credential acquisition, multi-level intranet penetratio...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office Security Feature Bypass CVE-2026-21509 is a Microsoft Office security feature bypass vulnerability CVSS 7.8 , actively exploited by APT28 Russian hackers against Ukraine Reliance on untrusted inputs in security decisions CWE-807 — "breaking the kill bit" Allows...

VECTR

VECTR documentation: https://docs.vectr.io VECTR Community Discord Channel: https://discord.gg/2FRd8zf728 VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios. VECTR provides the...

sfop

Segmentation Fault-Oriented Programming SFOP This is the artifacts repository for the Segmentation Fault-Oriented Programming exploitation technique. Artifacts Collection Here we briefly describe the artifacts in this repository. In total, there are eight different artifacts, composed of six PoC...

ssl-kill-switch3

SSL Kill Switch 3 Next Generation of iOS Tweak SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 with much more functionality! What's New? FIXED Fishhook Support iOS 15+, ARM64/ARM64e, so that you can hook in non-jailbreak era FIXED Rootless Support iOS 15+, ARM64/ARM64e, happy rootles...

ai-kill-chain

Extended Cyber Kill Chain for AI-Era Threats An update to the Lockheed Martin Cyber Kill Chain for defenders working against LLM and agentic AI attacks. Adds a pre-attack stage for model supply chain compromise. Adds AI-specific sub-techniques to each of the original seven stages. Splits the...

CVE-2026-32941

A framework-wide vulnerability in Sliver C2 allows for an unauthenticated, remote Denial of Service by triggering Uncontrolled Memory Allocation CWE-789 / CWE-400, leading to a process-wide Out-of-Memory OOM crash. References: Tenable Reproduction Steps: 1. Extract Credentials: Obtain the mTLS...

Mhyprot2DrvControl

Mhyprot2DrvControl A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process. Usage Build and run, see Driver\MhyProt2.cs for available function and usage. Demo...

jiopc-architecture-whitepaper

Architecture, Performance, and Security Analysis of JioPC Cloud Virtual Desktops A Comprehensive Technical Whitepaper & Engineering Evaluation Document Version : 2.0 Target Platform : JioPC Cloud Virtual Desktop Accops HyWorks / Microsoft Azure Classification : Technical Evaluation &...

DsArk64

DsArk64 DsArk64.sys ships with 360 Total Security. WHQL-signed by Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Requested MITRE. Primitives Process kill ring 0 IOCTL 0x80863008, input: 4-byte raw PID Driver calls ZwOpenProcessALLACCESS + ZwTerminateProcess from kernel No encryption on...

rusty_drivers

RustyDrivers This project is a BYOVD collection with the focus on killing EDR / AV processes. Currently the following drivers are supported: Driver| Argument Name| Blocked ---|---|--- Process Explorer| processexplorer| Yes Genshin Impact| genshin| Yes Rentdrv2| rentdrv2| No TrueSight| truesight| ...

killchain

killchain “Kill Chain” is a unified console with an anonymizer that will perform these stages of attacks: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Dependent tool sets are: 1. Tor -- For the console build-in Anonymizer. 2. Set -- Social-Engineer...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...