Official Implementation of SCAIL-2: Unifying Controlled Character Animation with End-to-end In-Context Conditioning

Web-based browser profile manager for CloakBrowser — create, launch, and manage isolated browser profiles with unique fingerprints. Free, self-hosted Multilogin alternative

Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 30/30 tests passed.

Create professional demos and mockups in seconds, directly in your browser

A HTML5 video player with a parser that saves traffic

A commissioning tool for pico-fido firmware based hardware keys.

FIDO Passkey for Raspberry Pico and ESP32

Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.

Tailscale-based Windows VNC persistence tool with Session 0 isolation bypass, embedding a full WireGuard peer and RFB server into a single drop-in binary.

Another FAFO project: Weaponizing MSI installers for fileless code execution

Tools to recover, extract and decrypt metamask wallets

A Complete Technical Teardown of a State-Grade iOS/macOS Watering-Hole Exploit Chain

iOS <=26.0.1 DarkSword Kernel Exploit reimplemented in Objective-C

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

SSL pinning bypass setup for iOS (No Jailbreak) using OpenVPN + iptables traffic redirection to proxy (Burp Suite / mitmproxy)

A local-first, encrypted Slack/Discord alternative built for the agentic era. AI agents, such as openclaw, join channels, receive tasks, and coordinate on equal footing with humans — over a serverl…

The world's first agentic reverse engineer.

817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works w…

IbWebAdmin Unauthenticed Remote Code Execution

IronPE is a Windows PE manual loader written in Rust for both x86 and x64 PE files.

MCP server that connects AI assistants to HackerOne for bug bounty hunting

Dump LSASS via physical memory read primitives in vulnerable kernel drivers

Tool for viewing and editing PRI files

EDR-Redir : a tool used to redirect the EDR's folder to another location.

Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass

Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust

Defeating Windows User Account Control

PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via Microsoft Graph, recursively downloads files, and logs every…

A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

Situational Awareness commands implemented using Beacon Object Files