shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing
☆71Sep 23, 2026Updated last month
Alternatives and similar repositories for HimitsuShell
Users that are interested in HimitsuShell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆31Oct 2, 2026Updated last month
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆43Sep 20, 2026Updated last month
- Standalone zero-driver Windows system and API monitor in Rust☆25Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated last week
- A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), …☆20Sep 13, 2026Updated last month
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- open-source pentest management built to be operated by an AI agent☆29Sep 1, 2026Updated 2 months ago
- Hades is a fully-featured cross-platform Chrome Extension agent. Hades is designed for Mythic 3.0 and newer.☆49Aug 12, 2026Updated 2 months ago
- A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent fi…☆23Sep 15, 2026Updated last month
- ☆32Sep 23, 2022Updated 4 years ago
- asmsense: a small model that names and describes functions in stripped x86-64 binaries. Open dataset, baselines, and LoRA experiments.☆19Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Linux Kernel LPE☆17Sep 28, 2026Updated last month
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆173Oct 8, 2026Updated 3 weeks ago
- ☆53Oct 4, 2026Updated last month
- ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations☆37Oct 6, 2026Updated last month
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆247Aug 9, 2026Updated 2 months ago
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated 2 months ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 3 months ago
- ☆88Sep 21, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Recursively mirrors any website to disk. HTML, CSS, JS, images, fonts, video. C++ console tool, C# WinForms GUI, Python script. No extern…☆18Oct 14, 2026Updated 3 weeks ago
- Drift Corpus : repository of Windows Kernel patch diffs.☆28Jul 15, 2026Updated 3 months ago
- Experimental .NET/WPF forensic toolkit for iCloud auth, CloudKit/MMCS backup download, and Octagon/PCS recovery (ADP, Recovery Key, Lockd…☆19Updated this week
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- Self-hosted MDM for Linux fleets. Enrollment, profiles, disk encryption, lock and wipe, OS updates and remote assistance with each distri…☆23Oct 28, 2026Updated last week
- Windows host hardening auditor and remediation tool in PowerShell: CIS, DISA STIG, Essential Eight checks, reversible fixes, optional AI …☆21Oct 30, 2026Updated last week
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated 2 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 4 months ago
- ☆25Oct 27, 2026Updated last week
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆70Updated this week
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- Fast HTTP access control testing tool designed to discover 401 and 403 bypass vulnerabilities☆21Apr 29, 2026Updated 6 months ago