Raspberry Pi Implant Builder
Dropbox: reverse SSH tunnel + auto-recon + credential capture Rogue AP: captive portal + credential harvesting Keylogger: USB HID capture + WiFi exfil Packet Ca
Arsenal
Professional offensive security tools & exploit frameworks
98
Tools
12
Categories
AMSI Bypass Payload Generator
6 techniques: AmsiScanBuffer patch, Reflection, ETW disable, COM hijack, CLM bypass, HW breakpoints String obfuscation (concat, reverse, char array, base64) XOR
PowerShell Obfuscation Engine
10 obfuscation layers: string concat, char encoding, base64 wrap, variable rename, alias replace, backtick insert, comment strip, type accelerators, env var abu
EDR Unhooking Library
EDR Evasion Toolkit: generates REAL, compilable C source for Windows x64 — ntdll unhooking via fresh disk remap, AMSI/ETW in-process patching, direct syscalls w
Process Injection Variants Pack
Process injection variants with REAL Windows primitives (ctypes, no deps): classic, NtQueueApcThread queueing, thread hijack with CONTEXT rewrite, early bird, m
Traffic Masking Proxy
4 built-in profiles: Google Search, Microsoft Update, Slack API, CDN Static Base64url data encoding within legitimate-looking URIs Malleable C2 profile generati
Living Off The Land Script Collection
Living-off-the-land collection with 52 real techniques (31 Windows + 21 Linux) across execution, download, persistence, recon, credential access, defense evasio
Custom Shellcode Generator
Shellcode generator + encoder. Generates REAL Linux x64 syscall shellcode — reverse TCP, bind TCP, HTTP staged (mmap + header-strip jump) and HTTP download-exec
Android APK Decompiler & Analyzer
APK extraction and manifest parsing Dangerous permission detection Hardcoded secret scanning (API keys, tokens, passwords, URLs) Native library analysis Exporte
Frida Script Collection
Frida script collection with 10 real, load-ready scripts (node --check clean) for Android and iOS: SSL pinning bypass, root/jailbreak bypass, crypto hooks, meth
iOS IPA Analyzer
IPA extraction and Info.plist parsing App Transport Security (ATS) configuration audit Entitlements extraction and dangerous entitlement detection Binary protec
Mobile API Interceptor Proxy Config
BOLA (Broken Object Level Authorization) detection Missing authentication header detection Sensitive data exposure in responses Excessive data exposure analysis