Pure-Go offensive-security primitives library: syscalls, evasion (AMSI/ETW/unhook/sleepmask), injection, PE packer, credentials, post-ex, C2. MITRE ATT&CK mapped. Authorized research only.
☆27Jul 13, 2026Updated 3 months ago
Alternatives and similar repositories for maldev
Users that are interested in maldev are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆19May 22, 2026Updated 4 months ago
- Evasion kit for Cobalt Strike☆17Aug 13, 2026Updated 2 months ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆58Jul 20, 2026Updated 2 months ago
- A docker compose infra designed to be securely self-hosted.☆12Dec 20, 2021Updated 4 years ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- Github repository which contains a functional exploit for CVE-2021-39165☆21Jul 13, 2022Updated 4 years ago
- ☆92Aug 5, 2026Updated 2 months ago
- Polymorphic x64 shellcode loader — indirect syscalls, phantom DLL hollowing, call stack spoofing, patchless AMSI/ETW bypass, zero CRT …☆29May 24, 2026Updated 4 months ago
- Golang Certificate Authority (CA) package☆51Aug 12, 2024Updated 2 years ago
- Evasive shellcode loader for Red Teaming☆18Aug 15, 2025Updated last year
- Some of the lab files for the SANS Institute course SEC505: Securing Windows and PowerShell Automation: https://sans.org/sec505☆19Jun 8, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆33Updated this week
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆36Nov 27, 2025Updated 10 months ago
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- A Linux x86/x86-64 tool to trace registers and memory regions.☆40Jun 9, 2022Updated 4 years ago
- ELF patching library in Python☆26Mar 15, 2021Updated 5 years ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated last week
- Cartridge-collection-looking game launcher. Unifies your library from different stores.☆34Updated this week
- A round dashboard for a 1st-gen Amazon Echo Spot: Kotlin shell on LineageOS plus a Windows tray agent. Clock, PC/GPU telemetry, ComfyUI, …☆53Oct 3, 2026Updated 2 weeks ago
- Proof-Of-Concept SSH Worm. Not for illegal use.☆16Mar 21, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis,…☆34Updated this week
- Discord Root-Me bot - built with Discord.js☆21May 27, 2025Updated last year
- Audit and pentest methodologies for Linux including internal enumeration, privesc, lateral movement, etc.☆19Apr 3, 2026Updated 6 months ago
- Kernel process termination using Microsoft's own signed driver.☆56Aug 10, 2026Updated 2 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆38Oct 1, 2026Updated 2 weeks ago
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆198Jun 25, 2026Updated 3 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆20Mar 31, 2026Updated 6 months ago
- Windows anti-forensics made easy☆11Mar 6, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆62Mar 28, 2026Updated 6 months ago
- PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting …☆93Sep 4, 2026Updated last month
- The Linux x86/x86-64 last chance debugging tool☆48Nov 7, 2022Updated 3 years ago
- Challenges of the HeroCTF v4 edition.☆36May 3, 2023Updated 3 years ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- 由夜安团队研发的代码审计平台，涵盖十多种常用语言， 提供从上传源代码、审计、靶机验证到生成报告的一站式流程，并最终形成真正可用的 POC。平台致力于发现最真实的漏洞（包括评级与漏洞本身），同时将成本控制在最低水平。在如何平衡成本与发现高危、严重真实漏洞之间，我们将持续探索研究…☆59Sep 18, 2026Updated last month
- ☆24Mar 30, 2026Updated 6 months ago