Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
- thefatrat
- bypass
- linux
- autorun
The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
switch user and group id and exec
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The PE file analysis toolkit
Gain control of your Hyundai Motor Group vehicle, NEMESIS provides a way to execute software as root. Compatible with Gen5W AVNT systems with OTA update support.
QuickJS with durable execution: suspend running JS, snapshot the whole heap, resume it in another process. Native TypeScript, a REPL that survives restarts, Rust bindings.
An interactive parallel ssh client featuring autocomplete and asynchronous execution.
- pssh
- ssh
- ssh-client
- autocompletion
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering(使用C和Intel x86汇编开发的Windows x86可执行文件打包工具,打包后的新文件可以阻碍逆向工程)
ARMv7 payload that provides arbitrary code execution on MediaTek bootloaders
A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zero cross-process writes.
Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.
Arduino library for ESP32 that implements an SSH client to connect and execute commands in a remote Server.
A simple, decompressing executable packer
Just a modern packer for elf binaries ( works on linux executables only )
ELF packer - encrypt and inject self-decryption code into executable ELF binary target
LZPACK - CP/M-80 (8080 and Z80) executable compressor in ANSI C89
- ansi-c
- c89
- compression
- compressor
Code for ASE'21 Paper "CorbFuzz: Checking Browser Security Policies with Fuzzing"
- fuzzing
- concolic-execution
- browser-security