yep full list of virustotal machines, OG REPO

Simple C# for checking for the existence of credential files related to AWS, Microsoft Azure, and Google Compute.

Export your Signal chats to markdown files with attachments

Pony 2.0 Stealer

golang decryption poc of the new app bound encryption introduced in chrome version 127.

Pillager是一个适用于后渗透期间的信息收集工具

Tool to decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface with path validation and encryption protections.

Shellcode loader using direct syscalls via Hell's Gate and payload encryption.

Chrome COOKIE v20 decryption PoC

A PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade analysis. Guaranteed to bring down your pafish ratings…

Hydra is a game launcher with its own embedded bittorrent client

Privacy focused messenger that doesn't trust anyone with your identity, your contact list, or your communications

A pure Python steganography module.

Cross-platform Python library for Post-Quantum Cryptography using precompiled PQClean binaries

Official DeepSound repository migrated from jpinsoft.net. DeepSound is a freeware steganography tool and audio converter that hides secret data into audio files. The application also enables you to…

This map lists the essential techniques to bypass anti-virus and EDR

Identifies the bytes that Microsoft Defender flags on.

Exe To Red Pixels

🔑 Open source stealer written in Go, all logs will be sent to Telegram bot.

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

C# Project contains a plenty of Advanced Anti-Debugging, Anti-Virtualization, Anti Dll-Injection and Anti-Hooking Techniques.

Script to create templates to use with VirtualBox to make vm detection harder

Anti-De4dot safeguards .NET binaries from De4dot decompiler, protecting intellectual property from unauthorized access.

Empire is a PowerShell and Python post-exploitation agent.

Anti-forensics tool Inspired by NSA's Marble framework.

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

LKM Linux rootkit

Linux userland rootkit. Hides file and directory, hides process, hides bind shell port, hides daemon port, hides reverse shell port, cleans up bash history and logs during installation