HexSec

Convert any executable (RAT, keylogger, botnet, meterpreter, anything) into raw shellcode and run it stealthily from memory using a custom C++ loader.

Good CLR Host with Native patchless AMSI Bypass

A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.

WormGPT CLI is a sleek command-line interface (CLI) for interacting with LLMs via OpenRouter API. It supports multiple models, automatic language detection, and customizable settings — all in a terminal-friendly format.

A simple tool to help you discover admin panels on websites.

HexSecGPT is designed to provide powerful, unrestricted, and seamless AI-driven conversations, pushing the boundaries of what is possible with natural language processing.

DroidHunter is a CLI-based Android security assessment framework for authorized testing, featuring ADB device management, APK analysis, network checks, vulnerability scanning, reporting, and remote control tools.

No description.

Welcome to the Bug Bounty Methodology 2026 Edition!

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A powerful, locale-agnostic Python command-line utility designed for Windows environments to retrieve, parse, and analyze saved WiFi profiles and cleartext passwords using native system utilities.

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

The main purpose is to generate custom wordlists based on user-provided info (name, surname, nickname, team, date of birth, etc.). The tool automatically applies variations like case transformations, leet speak, numeric tails, and token combinations.

Automation of some MAPT activities and interaction with the mobile Android device.

No description.

BrutDroid - Android Studio Pentest Automator: Streamline mobile pentesting with automated emulator rooting, Frida, and Burp Suite integration.

🕵️‍♂️ All-in-one OSINT tool for analysing any website

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

Multi-component Remote Access Trojan: C++ client (victim), C# server, and Angular frontend.

The Python Code Tutorials

No description.

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

No description.

This project demonstrates a simple but powerful client-server chat application built in Python. It uses AES-256 encryption in EAX mode to ensure confidentiality, integrity, and authenticity of all exchanged messages between the server and the client.

No description.

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

Hexdump metadata