Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
🔓 CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
:ghost: :flashlight: Invisible JS code execution & social engineering.
Attack tool for altering packed samples so that they evade static packing detection
- adversarial
- attack-defense
- evasion
- executable-packing