Lists (32)
AD Attack Path Discovery/Exploitation
46 repositories
BOFs
15 repositories
BYOVD
1 repository
C2 - C2 Channels
Different C2 Channels/Ideas14 repositories
C2 capabilities
47 repositories
Cloud Security
4 repositories
COM/DCOM
6 repositories
Creds
21 repositories
Crystal Palace
3 repositories
Defense tools
7 repositories
EDR Offensive Tools
Tools that target EDR7 repositories
Evasion tools
62 repositories
How to
7 repositories
iOS
3 repositories
Lateral movement
14 repositories
LLM - Offensive Uses
35 repositories
LLM Security
5 repositories
Network tools
7 repositories
Non-hacking
10 repositories
OSCP
1 repository
Payload Delivery
4 repositories
Persistence
5 repositories
Phishing
5 repositories
Post Beachhead Recon
17 repositories
Privesc
7 repositories
Purple Team
3 repositories
Recon
17 repositories
Red Team Infra
13 repositories
Stunt Hacking
1 repository
Tools
38 repositories
Vibe
23 repositories
Vulnerability Research
5 repositories
Starred repositories
Active Directory data ingestor for BloodHound Community Edition written in Rust. 🦀
The headless browser for AI agents and web scraping
DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.
Claude Code inference provider for Pi that uses ACP to talk to real Claude Code and allows the use of Pro/Max subscriptions
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
control your applications using pi-coding-agent. fully invisible.
A fileless C2 framework written in pure x64 Linux Assembly with zero libc dependencies. Features dynamic protocol pivoting between raw ICMP sockets and DNS (UDP/53) via in-memory VTable manipulatio…
Ground Station is all-in-one satellite monitoring suite
Drop a single binary into a compromised Kubernetes pod and instantly map every realistic attack path to cluster-admin, node escape, secret theft, and cloud IAM takeover.
A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.
Play Doom entirely from DNS records. (PowerShell 7+)
Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.
A yt-dlp plugin to unlock the cookie database of chromium-based browsers
psexecsvc - a python implementation of PSExec's native service implementation
Extract Windows credentials directly from VM memory snapshots and virtual disks
KslDump — Why bring your own knife when Defender already left one in the kitchen?
AI agent toolkit: coding agent CLI, unified LLM API, TUI & web UI libraries, Slack bot, vLLM pods
Pi extension for async subagent delegation with truncation, artifacts, and session sharing
Beacon Object Files (BOFs) for Cobalt Strike and Havoc C2. Implementations of Active Directory attacks and post-exploitation techniques.
754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub …
We took PersistenceSniper, merged it with Python, and misspelled it on purpose. Meet PyrsistenceSniper.
MCP server for analyzing PE, ELF, and Mach-O binaries using LIEF
Use this skill to enable Claude Code to communicate directly with your Google NotebookLM notebooks. Query your uploaded documents and get source-grounded, citation-backed answers from Gemini. Featu…
High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 66 languages, sub-ms queries, 99% fewer tokens. Single static bina…