BOF RunPE is a Beacon Object File for Cobalt Strike that executes PE files entirely in-memory within the beacon process. Unlike traditional fork&run, no child process is spawned, no console is created, and no pipe...
Within the dominion of cybersecurity, a perpetual, sisyphean race has long endured: defenders fortify a breach, assailants unearth a clandestine bypass, and the cycle inexorably repeats. Now, generative artificial intelligence has unequivocally entered this...
An autonomous artificial intelligence agent breached the internal AI platform of the consulting leviathan McKinsey & Company in a mere two hours. This offensive was orchestrated by the vanguard of CodeWall, a startup dedicated...
SpecterBroker Advanced Windows authentication token extraction and decryption tool for red team operations and security research. SpecterBroker is a comprehensive post-exploitation tool designed for extracting and decrypting Windows authentication tokens from multiple sources. It targets...
Introduction Eden-RAT is a lightweight remote access tool (RAT) designed for the initial stage of penetration testing. It provides a graphical user interface (GUI) with multiple features for Linux systems, including a file manager...
LSA Whisperer BOF A Cobalt Strike Beacon Object File (BOF) port of LSA Whisperer — the tool that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, without touching LSASS process memory even...
Cobalt Strike Linux Beacon A proof-of-concept custom Linux Beacon written in C that communicates with the Cobalt Strike teamserver using the HTTP/S protocol. The goal of this project isn’t to be a fully featured...
Multi-turn Injection Planning System for LLM Evaluation MIPSEval is a modular framework for simulating and evaluating the behavior of Large Language Models (LLMs) in adversarial or structured multi-turn conversational scenarios. It supports both OpenAI-hosted...
GHARF is an efficient support framework for Red Team exercises that applies the concept of CI/CD (Continuous Integration / Continuous Delivery). It can be used for exercises aimed at security assessment, research, and human...
GotMeta A Python tool for discovering, downloading, and extracting metadata from publicly available files on target domains. Useful for OSINT. Features File Finder – Find publicly available files on target domains Metadata Extraction – Extract all...
Venom C2 is a dependency‑free Python3 Command & Control framework for redteam persistence, built to run on systems without installing packages. It comprises a Flask team server, an Electron operator GUI, and a single‑file...
Conquest is a feature-rich, extensible and malleable command & control/post-exploitation framework developed for penetration testing and adversary simulation. Conquest’s team server, operator client and agent have all been developed from scratch using the Nim programming...
