Robert

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

tl/dw (Too Long, Didn't Watch): Your Personal Research Multi-Tool - a naive attempt at 'A Young Lady's Illustrated Primer' (Open Source NotebookLM)

Penetration Testing/Security Cheatsheets

Automatically exported from code.google.com/p/hyperdbg

Standalone Client for tldw_server; NotebookLM(+more) in your terminal; No tracking/Can run entirely offline

Quick Start/Setup of CI/CD for Offensive/Defensive Purposes

Tool to help researchers and journalists better understand large datasets

Let's transcribe every single defcon talk and make them easily searchable by title, content, or author!

The CryptoParty Handbook

No description.

No description.

A Python library for extracting structured information from unstructured text using LLMs with precise source grounding and interactive visualization.

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

Wiki pages about Android internals

A checklist for staying safe on the internet

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

How to systematically secure anything: a repository about security engineering

An application that uses LLM agents and other pieces to perform processing of data, that is damn vulnerable.

Architecture decision record (ADR) examples for software planning, IT leadership, and template documentation

Browser Extension to interact with the tldw server

DOM to Semantic-Markdown for use with LLMs (Python version)

Repo to hold random one-off scripts that would otherwise be lost to the aether.

A community-driven collection of RAG (Retrieval-Augmented Generation) frameworks, projects, and resources. Contribute and explore the evolving RAG ecosystem.

An Open Source Python alternative to NotebookLM's podcast feature: Transforming Multimodal Content into Captivating Multilingual Audio Conversations with GenAI

A fully custom chatbot built with Agentic RAG (Retrieval-Augmented Generation), combining OpenAI models with a local knowledge base for accurate, context-aware, and explainable responses. Features a lightweight, dependency-free frontend and a streamlined FastAPI backend for complete control and simplicity.

Cutting-edge web scraping techniques workshop at NICAR 2025

Config files for LLM-related things

🐍 CntxtPY: Python codebase analyzer that generates LLM-optimized knowledge graphs for your project | Code structure visualization | LLM Context Window Efficiency | Static analysis for AI | Large Language Model tooling #LLM #AI #Python #CodeAnalysis #ContextWindow #DeveloperTools

MockAI is a mock server for various LLM APIs. It allows you to simulate Chat Completions API responses for development and testing purposes.

LiveBench: A Challenging, Contamination-Free LLM Benchmark

Lair is a reactive attack collaboration framework and web application built with meteor.

Client for the xml rpc interface of the Nessus vulnerability scanner v5+

No description.

Cobalt Strike UDRL for memory scanner evasion.

No description.

A simple wrapper for C# tools

A collection of pentest and development tips

A Catalog of Application Whitelisting Bypass Techniques

No description.

Copy of Subtee's Repository That's Taken Down

A framework for developing alerting and detection strategies for incident response.

A Network Enumeration and Attack Toolset

A simple and easy to use JS Botnet

404 File not found C2 PoC

My own tools for easing the task of pentesting / exploit writing

Miscellaneous Tools

Issues to consider when planning a red team exercise.

No description.

Clone a voice in 5 seconds to generate arbitrary speech in real-time

A collection of data exfiltration scripts for Red Team assessments.

🏴‍☠️ Tools for pentesting, CTFs & wargames. 🏴‍☠️

Microsoft » Windows 10 : Security Vulnerabilities

Resources for Windows exploit development

Just some public notes that can be useful and i want let the world knows.

Secure all the things

Automatically exported from code.google.com/p/cms-explorer

Standalone Python compatibility implementation of Backlog.md

No description.

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

Site Page for Infosec Reference

agent for use with tldw_Server

A Textual widget library for picking things in the filesystem

Browser extension for tldw_server

Frontier Open-Source Text-to-Speech

Sharing both practical insights and theoretical knowledge about LLM evaluation that we gathered while managing the Open LLM Leaderboard and designing lighteval!

GUI-based UAC bypass

WMI virus, because funny

Implementation of code generation guard-rails using Property-based Testing ala https://arxiv.org/pdf/2506.18315

Daily ArXiv Papers.

llama.cpp clone with additional SOTA quants and improved CPU performance

SAST + LLM Interprocedural Context Extractor

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

Purpose-built Red Team network hardware implant made from common components.

The Havoc Framework.

.NET Antivirus Evasion Tool (Exe2Bat)

Chunk Visualizer written in python

Framework to create Munchers-like games

Codes for the paper "∞Bench: Extending Long Context Evaluation Beyond 100K Tokens": https://arxiv.org/abs/2402.13718

Mapping Phishing Pretexts

GGUF based MMLU-Pro benchmark tool

Goal: Create a comprehensive wildcard collection not focused on NSFW

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Web app authorization coverage scanning

No description.

Adversary Tactics - PowerShell Training

Level 1 - Hardware Antidetect source code. Spoof hardware ID

Framework for testing any Anti-Cheat

No description.

Automate AV evasion by calling AMSI

The Hunt for Malicious Strings

Circumvent AMSI by patching AmsiScanBuffer

Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) passed into AMSI during dynamic execution.

Patch AMSI and ETW

Alternative Shellcode Execution Via Callbacks

Executes Blended Managed/Unmanged Exports

Attack Knowledge Base

AdmPwd project

Python3 Ebowla... 3Bowla

Proof of concept communications from C# via a web browser process

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)

Threat Emulation and Red Teaming Framework, The Hacking Software for normal people.

Tips, Tricks, and Suggestions for Running a CTF

PwnWiki - The notes section of the pentesters mind.

Internet history forensics for Google Chrome/Chromium

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS based scripts.

Simple (relatively) things allowing you to dig a bit deeper than usual.

WTSRM

No description.

howdoi - instant coding answers via the command line

A curated list of tools for incident response

List of hints and Q&As to get most of your Linux/Android device

Open Red Team Bag of Tricks - Red Teaming and Pentesting cheat sheet and trick book

A curated list of awesome Security Hardening techniques for Windows.

PowerShell for Pentesters

A bunch of links related to Linux kernel exploitation

WikiLeaks Vault 7 CIA Hacking Tools

The goal of this repository is to document the most common techniques to bypass AppLocker.

Sphinx

No description.

No description.

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

Windows Hardening settings and configurations

ReaCOM has got a lot of tools to use and is related to component object model

Collection of scripts and utilities for Windows event hunting

Collection of Offensive C# Tooling

Ps-Tools, an advanced process monitoring toolkit for offensive operations

windows-kernel-exploits Windows平台提权漏洞集合

Library and tools to access the Windows XML Event Log (EVTX) format

No description.

Resources About Hooking. For All Platforms. Currently 300+ Tools And 600+ Posts.

No description.

Collection of C# projects. Useful for pentesting and redteaming.

Creative and unusual things that can be done with the Windows API.

Automatically exported from code.google.com/p/it-sec-catalog

Hundreds of agent skills for medical research, including protocol design, data analysis, evidence insights, and academic writing.

Session-first terminal UI for local AI-generated focus music

AI assistant for Dota 2 with real-time game analysis via GSI and advice from LLM

Crack any Microsoft Windows users password without any privilege (Guest account included)

CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys

YellowKey Bitlocker Bypass Vulnerability

The Red Sun vulnerability repository

GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability

A Claude Code skill that runs a domain-expert review of a design section in conversation — internal expert ↔ reviewer debate, structured findings, revised section.

From Agentic Intelligence to Interactive Intelligence. Give your AI agent a body and home.

SimplE RePort wrIting and COllaboration tool

An agentic skills framework & software development methodology that works.

No description.

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

LLM inference in C/C++

A Python 3 library for generating Anki decks

LLM for Long Text Summary (Comprehensive Bulleted Notes) : Walkthrough and Model Rankings

No description.

Python3 version of Runscope/requestbin

Android Reverse Engineering Framework & Toolkit

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

usermode standalone kernel interface

No description.

A cross-platform GUI for youtube-dl made in Electron and node.js

different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)

Databases with sample data for testing

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

A Dropper POC focusing EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table

The Wasp Lisp Virtual Machine, Associated Libraries, and MOSREF

Python module for running BOFs

SharpLDAP is a tool writting in C# that aims to do enumeration via LDAP queries

A collection of (even more) alternative shellcode callback methods in CSharp

Implement WSUSpendu attack

Archive R/W into any protected process by changing the value of KTHREAD->PreviousMode

Anti-cheat library for Windows C++

Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits

source code

SysWhispers integrated shellcode loader w/ ETW patching, anti-sandboxing, & spoofed code signing certificates

Collection of Windows Privilege Escalation (Analyse/PoC/Exp...)

Public variation of Titan Loader

2022 Updated Kernelmode-Code

Implant drop-in for EDR testing

No description.

tpy, a pet python forked from tinypy

No description.

A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.

No description.

No description.

You shall pass

Using Thread Description To Hide Shellcode

No description.

No description.

A collaborative, multi-platform, red teaming framework

A kernel mode Windows rootkit in development.

No description.

KaynLdr is a Reflective Loader written in C/ASM

Timestomping module: overwrite file create/modify times in .NET (no pinvoke)

https://twitter.com/itsreallynick/status/1120410950430089224

Multipurpose malware framework utilizing vk.com as c2

No description.

r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection

stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device objects.

Python / C# Unmanaged PowerShell based RAT

No description.