Popular repositories Loading

1. C2-Profiler C2-Profiler Public

   C2 Framework Fingerprinter: identifies Cobalt Strike, Metasploit, Sliver, Havoc, Covenant, Brute Ratel from PCAP traffic using beacon analysis, URI patterns, JA3, and HTTP headers

   Python 3

2. VoidSyscall VoidSyscall Public

   Direct NT Syscall Framework -- Bypass ALL userland hooks via direct syscalls. Hell's Gate, Halos Gate, Tartarus Gate. Assembly + Python.

   Python 2

3. ShadowTrace ShadowTrace Public

   ETW-based real-time threat detection: process injection, credential theft, LOLBins, AMSI bypass, PowerShell monitoring mapped to MITRE ATT&CK

   Python 1

4. GhostWrite GhostWrite Public

   Fileless Persistence Engine -- 7 techniques that survive reboot without writing a single file to disk. Pure Go.

   Go 1

5. SilentLoader SilentLoader Public

   Linux In-Memory ELF Loader -- Execute binaries from memory via memfd_create, /proc/self/mem, shm_open. Zero disk artifacts. Bash + Python.

   Python 1

6. mazen91111 mazen91111 Public

   Config files for my GitHub profile.