Hacking

GitHub - 0x4m4/hexstrike-ai: HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.

fkie-cad/cwe_checker: cwe_checker finds vulnerable patterns in binary executables

Print3M/DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL.

the tigress c obfuscator

Loki: Hardening Code Obfuscation Against Automated Attacks

GitHub - BlackSnufkin/LitterBox: A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.

ghostsecurity/reaper: 💀 Don't fear the Reaper 👻

.NET GAC and NIC hijacking for lateral movement - ...

io_uring Rootkit Bypasses Linux Security Tools - ARMO

lwthiker/curl-impersonate: curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

FunnyWolf/Viper: A Unified Platform for Adversary Emulation and Red Team Operations

DosX-dev/Astral-PE: Astral-PE is a low-level mutator (headers obfuscator) for native Windows PE files (x32/x64)

wietze/ArgFuscator.net: ArgFuscator.net is an open-source, stand-alone web application that helps generate obfuscated command lines for common system-native executables.

WorstFit: Unveiling Hidden Transformers in Windows ANSI!

hardenedlinux/userland-exec: Userland exec PoC to be used as attack vector technique

devttys0/delink

xaitax/TotalRecall: This tool extracts and displays data from the Recall feature in Windows 11, providing an easy way to access information about your PC's activity snapshots.

two06/CerealKiller: .NET deserialization hunter

Kudaes/Shelter: ROP-based sleep obfuscation to evade memory scanners

Scheduled Task Tampering

Listen to the whispers: web timing attacks that actually work

Malicious Registry Timestamp Manipulation Technique: Detecting Registry Timestomping

The Definitive Guide to Linux Process Injection | Akamai

SELinux bypasses | Klecko Blog

Octoberfest7/Secure_Stager: An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution

aapooksman/certmitm: A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

Critical Vulnerabilities Discovered in Automated Tank Gauge Systems | Bitsight

Kudaes/DInvoke_rs: Dynamically invoke arbitrary unmanaged code

The (Anti-)EDR Compendium

Red Teaming in the age of EDR: Evasion of Endpoint Detection Through Malware Virtualisation