Gain shellcode execution via T4 Text Transform files/TextTransoform.exe
☆67Oct 23, 2026Updated this week
Alternatives and similar repositories for TTs
Users that are interested in TTs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆56Sep 15, 2026Updated last month
- krbrelayx fork that defeats enforced SMB signing on an SMB relay (opt-in --reauth-bypass).☆61Updated this week
- Group3r but in Python☆63Oct 11, 2026Updated 2 weeks ago
- Demonstration of the DLL party process injection technique☆98Oct 1, 2026Updated 3 weeks ago
- ☆37Sep 22, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.☆88Oct 18, 2026Updated last week
- ☆72Jul 12, 2026Updated 3 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆21Oct 4, 2026Updated 3 weeks ago
- Process Explorer vulnerable driver PPL Bypass☆27Sep 30, 2026Updated 3 weeks ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆35Oct 14, 2026Updated last week
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆45Oct 18, 2026Updated last week
- Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.☆46Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 4 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆34Mar 14, 2026Updated 7 months ago
- Proof-of-concept demonstrating browser-native file encryption via the File System Access API. No software installation required - runs en…☆16Jul 28, 2026Updated 2 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆68Oct 18, 2026Updated last week
- ☆16Aug 11, 2026Updated 2 months ago
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆62Jul 22, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Refreshing Device Bound Session Credentials (DBSC) with Chromiums session store and the Windows CNG API☆31Jul 25, 2026Updated 3 months ago
- iboot researches☆14Sep 13, 2026Updated last month
- Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to…☆13Sep 23, 2026Updated last month
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 2 months ago
- RE Rust rewrites on steroids☆33Updated this week
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- A Ligolo-ng JavaScript agent working inside Chrome & Chromium-based browsers by leveraging Isolated Web Applications.☆139Mar 30, 2026Updated 6 months ago
- NTLM Relaying to generic web services with NTLM authentication☆84Mar 20, 2026Updated 7 months ago
- ☆38Sep 8, 2026Updated last month
- Brute Ratel External C2 (Microsoft Teams)☆38Dec 11, 2024Updated last year
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago