A suite of services (SOCKS, FTP, shell, etc.) over Citrix, VMware Horizon and native Windows RDP virtual channels.

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

AutoRMM is a collection of scripts and instructions we are organizing, to test delivery mechanisms for RMM and screen sharing tools, along with post exploitation strategies for blue and red teams w…

PoCs and tools for investigation of Windows process execution techniques

Python Duo Push API

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

CVE-2025-1974

ChatGPT Jailbreaks, GPT Assistants Prompt Leaks, GPTs Prompt Injection, LLM Prompt Security, Super Prompts, Prompt Hack, Prompt Security, Ai Prompt Engineering, Adversarial Machine Learning.

A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.

My POCs for CVEs & stuff

ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.

A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.

Because AV evasion should be easy.

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

ai-generated apps , full stack + generative UI

Multilayered AV/EDR Evasion Framework

一个验证对CVE-2024-21733

此项目的POC来源为2024年以来各大威胁情报的高危漏洞复现，POC已通过nuclei或xray武器化，本项目旨在为网络安全爱好者们提供一点参考资料，可供个人研究使用，共勉

CVE-2024-21006 exp

Information stealer logs parser