generate CobaltStrike's cross-platform payload

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)

Open-Source Shellcode & PE Packer

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

Collection of PoC and offensive techniques used by the BlackArrow Red Team

AV Evasion Tool For Red Team Ops

TCP Port Redirection Utility

👻Impost3r -- A linux password thief

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

Native Syscalls Shellcode Injector

Process Injection using Thread Name

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

Passwords Recovery Tool

Dumping SAM / SECURITY / SYSTEM registry hives with a Beacon Object File

PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)

My public notes about offensive security

Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.

LD_PRELOAD rootkit

Winsock accept() Backdoor Implant.