TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

A little tool to play with Windows security

Ultralightweight JSON parser in ANSI C

Defeating Windows User Account Control

Small portable AES128/192/256 in C

Jsmn is a world fastest JSON parser/tokenizer. This is the official repo replacing the old one at Bitbucket

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support d…

Windows tool for dumping malware PE files from memory back to disk for analysis.

Simple reverse ICMP shell

Post Exploitation Collection

Heavily optimized library for DEFLATE/zlib/gzip compression and decompression

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-dete…

peinjector - MITM PE file infector

MPack - A C encoder/decoder for the MessagePack serialization format / msgpack.org[C]

malware source codes

Executes PowerShell from an unmanaged process

Script to execute in memory a sequence of opcodes

BEURK Experimental Unix RootKit

Hijack Putty sessions in order to sniff conversation and inject Linux commands.

An implementation of the MessagePack serialization format in C / msgpack.org[C]

Radically unbloated DEFLATE/zlib/gzip compression/decompression library. Can decompress any gzip/zlib data, and offers simplified compressor which produces gzip-compatible output, while requiring m…

A client compatible with Metasploit's staging protocol

Simple implementation of msgpack in C

Library that allows you to run 64bit code on a Wow64 32bit process

PLEASE NOTE THAT THIS FORK IS NOT MAINTAINED! For the maintained fork please refer to https://github.com/versat/cntlm. Cntlm is an NTLM / NTLM Session Response / NTLMv2 authenticating HTTP proxy in…

Small fast Lempel-Ziv compression library

A simple and efficient MsgPack binary serialization library in a self-contained header file

A simple client to demonstrate Layer-2 pivoting. Compatible with the simpletun.c server written by Davide Brini.