appsandbox

App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...

Detection-Rules

APT29 Detection Engineering Production-ready Sigma detection rules developed from analysis of 196,071 Sysmon events in the MITRE ATT&CK Evaluations APT29 dataset. Overview This repository contains validated detection rules for adversary behaviors observed during APT29 simulation. Each rule was...

aiengine

AIEngine Artificial Inteligent Engine AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua packet inspection engine with capabilities of learning without any human intervention, NIDSNetwork Intrusion Detection System functionality, DNS domain classification, network...

rpi-hunter

rpi-hunter Automate discovering and dropping payloads on LAN Raspberry Pi's via ssh Or, the honest title: Automating sshpass for command delivery. Rpi-hunter is useful when there are multiple Raspberry Pi's on your LAN with default or known credentials, in order to automate sending...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

Oh365UserFinder

Oh365 User Finder v1.1.2 Oh365UserFinder is used for identifying valid o365 accounts and domains without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. The tool will attempt to identify...

augustus

Augustus - LLM vulnerability scanner for prompt injection, jailbreak, and adversarial attack testing Augustus - LLM Vulnerability Scanner Test large language models against 210+ adversarial attacks covering prompt injection, jailbreaks, encoding exploits, and data extraction. Augustus is a Go-bas...

SharpBlock

SharpBlock A method of bypassing EDR's active projection DLL's by preventing entry point execution. Features Blocks EDR DLL entry point execution, which prevents EDR hooks from being placed. Patchless AMSI bypass that is undetectable from scanners looking for Amsi.dll code patches at runtime. Hos...

CloakQuest3r

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...

apk-mitm

apk-mitm A CLI application that automatically prepares Android APK files for HTTPS inspection Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers...

cryptohackfirm

Cryptohack A semi-secure, hacker-friendly hardware crypto wallet on the hip-badge ESP32-C3 platform with the onboard ATECC608B secure element. Signs transactions for BTC , ETH + 8 EVM chains, SOL , and XMR with an on-device SIGN screen the user has to approve before any private key touches the...

AzureHunter

A Powershell module to run threat hunting playbooks on data from Azure and O365 for Cloud Forensics purposes. Getting Started 1. Check that you have the right O365 Permissions The following roles are required in Exchange Online, in order to be able to have read only access to the UnifiedAuditLog:...

EasY_HaCk

EasYHaCk 1. Hack the World using Termux this tool is developed by sabri.zaki for penetration testing using 2. metasploit-framework 3. sqlmap 4. nmap 5. metagoofil 6. RED HAWK 7. recon-ng and much more powerful testing tools EasYHaCk is a tool for network scanning and information gathering and for...

HyperDbg

HyperDbg Debugger HyperDbg Debugger is an open-source, hypervisor-assisted debugger for Windows Linux support is currently under development! with support for both user-mode and kernel-mode native debugging. It is built for reverse engineering, fuzzing, and advanced system analysis using modern...

boha

@agntn/puzzles Public crypto puzzles and bounties, as typed records. You ask for a puzzle, you get its address, its key material and what happened on chain. Why? Every puzzle thread has the same three things: the addresses, the prizes, and who solved what. Every scanner and tracker re-types them...

llvm-jutsu

llvm-jutsu: anti-LLM obfuscation This is a 32-bit integer The Problem It's 2025. You've spent weeks crafting the perfect license check. You've used every trick in the book: opaque predicates, control flow flattening, MBA expressions. You deploy. Within hours, some guy pastes your binary into Clau...

CVE-2018-10933

libSSH-Authentication-Bypass Spawn to shell without any credentials by using CVE-2018-10933 Exploit-DB : https://www.exploit-db.com/exploits/45638 Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt Bugfix Release by libSSH :...

syncord

Syncord $$\ $$ | $$$$$$$\ $$\ $$\ $$$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$$ | $$ |$$ | $$ |$$ $$\ $$ |$$ $$\ $$ $$\ $$ $$ | $$$$$$\ $$ | $$ |$$ | $$ |$$ / $$ / $$ |$$ | |$$ / $$ | $$\ $$ | $$ |$$ | $$ |$$ | $$ | $$ |$$ | $$ | $$ | $$$$$$$ |$$$$$$$ |$$ | $$ |$$$$$$$\ $$$$$$ |$$ | $$$$$$$ | /...

demiguise

Demiguise - HTA encryption tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/demiguise Released under AGPL, see LICENSE for more information What does it do? The aim of th...

ExifSmugglingPoC

Exif Smuggling A Proof-of-Concept evolution of Cache Smuggling. This attack conceals an executable payload inside a JPG's Exif data. As a result, image caching such as that of a Web Browser can be used to passively download the payload. As a result, the example loader chromepoc.ps1 does not need ...