S

security-research

ShadowRAT is a Remote Access Trojan that uses Telegram as its command and control (C2) channel. It provides complete remote control over a Windows machine through a Telegram bot

CamHawk is a camera phishing tool that tricks users into granting webcam access. Once permission is granted, the tool captures images from the webcam and sends them to your machine.

Tomcat backdoor based on CS blog

SVG Analysis and generation tools for commonly seen SVG attachment phishing

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

Push notification demo based on malware seen in the wild.

Compiled .NET 8 PowerShell deobfuscation sandbox

USB Modem/IAX2 War Dialer

Extract useful information from PANOS support file for CVE-2024-3400

MAPS cloud scanner and response parser for Microsoft Defender research.

VDM sig bypass and additional WinAPI stubs

JA4 proxy tooling.

IP obfuscation and URL generator.

Canary Detection

Browser fingerprinting and automation/bot detection analyzer

Collection of extracted Microsoft Defender data for security research purposes

Overview of MS Defender

CVE 2025 27237 Zabbix LPE proof of concept.

Deployment scripts for automated labs.

For testing or trolling LLM based pentesting frameworks.