Pure-Go offensive-security primitives library: syscalls, evasion (AMSI/ETW/unhook/sleepmask), injection, PE packer, credentials, post-ex, C2. MITRE ATT&CK mapped. Authorized research only.
☆27Jul 13, 2026Updated 3 months ago
Alternatives and similar repositories for maldev
Users that are interested in maldev are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆18May 22, 2026Updated 5 months ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆60Oct 3, 2026Updated last month
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆57Oct 13, 2026Updated 3 weeks ago
- A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent fi…☆23Sep 15, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 11 months ago
- Some of the lab files for the SANS Institute course SEC505: Securing Windows and PowerShell Automation: https://sans.org/sec505☆19Jun 8, 2017Updated 9 years ago
- Sliver C2 Stager that bypasses Windows Defender☆26Dec 4, 2025Updated 11 months ago
- Interactive Active Directory shell and attack toolkit over LDAP(S) or ADWS (SOAP) written in Rust. 🦀☆19Updated this week
- a lightweight, fast, and fully portable reimplementation of Impacket in TypeScript and JavaScript.☆29Sep 2, 2026Updated 2 months ago
- Windows anti-forensics made easy☆11Mar 6, 2024Updated 2 years ago
- Audit and pentest methodologies for Windows including internal enumeration, privesc, lateral movement, etc.☆20Mar 31, 2026Updated 7 months ago
- Audit and pentest methodologies for Linux including internal enumeration, privesc, lateral movement, etc.☆19Apr 3, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Powershell code to attempt to beat the signature based checking for AMSI Bypass☆10Sep 24, 2018Updated 8 years ago
- Rust based C2 Framework☆35Sep 29, 2026Updated last month
- A BOF for patching AMSI, ETW and NtTraceEvent aka Sysmon using Trampolines☆13Jul 30, 2026Updated 3 months ago
- Enable trusted boot with LUKS and TPM to protect root partition and VM storage.☆11Jun 14, 2025Updated last year
- Python exploit for ResetNightmare☆14Aug 6, 2026Updated 3 months ago
- A Port Scanning BOF (COFF) that replicates Cobalt Strike's Port Scanning functionality. Also includes a ping scanner.☆24Jan 1, 2026Updated 10 months ago
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 6 months ago
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated 3 months ago
- Analyze software: memory scanner, debugger and static analysis of executables, .NET and Electron apps, from the desktop, the command line…☆33Updated this week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated last week
- VisualStudio port of https://github.com/guervild/BOFs/tree/dev/SilentLsassDump☆23Jul 6, 2023Updated 3 years ago
- ☆60Mar 28, 2026Updated 7 months ago
- Shikata ga nai (仕方がない) encoder ported into go with several improvements☆32Aug 27, 2026Updated 2 months ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆44Oct 29, 2026Updated last week
- Evasive loader for .NET Framework assemblies☆84May 12, 2026Updated 5 months ago
- ☆13Dec 17, 2025Updated 10 months ago
- Curated reference of file magic bytes for file type identification and forensics.☆16Jan 19, 2026Updated 9 months ago
- Unauthenticated RCE PoC in Microsoft Windows Server Update Service (WSUS) - CVE-2025-59287 & CVE-2023-35317☆15Dec 10, 2025Updated 10 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- CSharp4Pentesters☆11Mar 5, 2022Updated 4 years ago
- Modify IL code during Run-time☆12Dec 2, 2015Updated 10 years ago
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- Python scripts that helps in the development of PPKG binaries☆16Jul 31, 2026Updated 3 months ago
- Repo to the corresponding blog post about implant P2P communications.☆13Dec 7, 2025Updated 11 months ago
- ☆15Nov 15, 2025Updated 11 months ago
- A deliberately vulnerable Android application to demonstrate exfiltration scenarios☆13May 20, 2020Updated 6 years ago