red-teaming-tools

Multilayered AV/EDR Evasion Framework (no longer actively maintained)

A command-line tool for discovering URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

Cross Platform Telegram based RAT that communicates via telegram to evade network restrictions

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

Repo containing cracked red teaming tools.

🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.

A command-line tool for recursively spidering webpages for URLs. It works by actively traversing websites, following links embedded in webpages, and parsing files (including sitemaps & robots.txt), to uncover every URL.

🛡️ Official AI Security Tool module for CVE-2026-41096 (Windows DNSAPI.dll Heap Overflow / DNS-Mayhem Deep Dive Analysis & Audit Module).

Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷

In-target C# post-exploitation and exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login impersonation at every hop.

Manual Prompt Injection / Red Teaming Tool

A golang-written credential harvesting framework leveraging eBPF for kernel-level monitoring with anti-detection capabilities.

Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go beacon with ECDSA-signed tasks and compile-time OPSEC profiles. One operator console, shared TLS, per-session logs.

Whitebox & Blackbox AI red-teaming framework for LLMs & Agentic AI apps. It analyzes your app's source code to discover tools, roles, and guardrails, then generates new attacks chains across several categories and adapts over multiple multi turn rounds to find vulnerabilities

Sh3ller is a lightweight C2 framework in its simplest form.

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load

🛡️ Official AI Security Tool module for CVE-2026-31431 ("Copy Fail" / Linux algif_aead page-cache scratch-write LPE Exploit & Detector).

🛡️ Official AI Security Tool module for CVE-2026-41651 (PackageKit TOCTOU Local Privilege Escalation / Pack2TheRoot Deep Dive Analysis & Audit Module).

Pdf-exploit builder Non-Silent on C#