SafeBreach Labs (@SafeBreach-Labs)
Guthub

SafeBreach-Labs

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    2,705
  • Global Org. Rank 7,517 (Top 3 %)
  • Registered about 8 years ago
  • Most used languages
    Python
         72.0 %
    C++
         12.0 %
    C
         8.0 %
    Perl
         4.0 %
    Shell
         4.0 %
  • Location 🇺🇸 United States
  • Country Total Rank 3,791
  • Country Ranking
    Perl
         368
    C++
         516
    Shell
         717
    Python
         737
    C
         1,283

Top repositories

1

pinjectra

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
C++
761
star
2

SirepRAT

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)
Python
366
star
3

EDRaser

EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual.
Python
306
star
4

pwndsh

Post-exploitation framework (and an interactive shell) developed in Bash shell scripting
Shell
306
star
5

pacdoor

Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration (PAC) File
Python
152
star
6

pyekaboo

Proof-of-concept program that is able to to hijack/hook/proxy Python module(s) thanks to $PYTHONPATH variable
Python
148
star
7

Back2TheFuture

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.
C
146
star
8

hAFL2

A kAFL based hypervisor fuzzer which fully supports nested VMs
Python
129
star
9

CloudMiner

Execute code using Azure Automation service without getting charged
Python
127
star
10

wd-pretender

Python
113
star
11

SimpleBITSServer

A simple python implementation of a BITS server.
Python
97
star
12

BITSInject

A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as the NT AUTHORITY/SYSTEM account
Python
97
star
13

mkmalwarefrom

Proof-of-concept two-stage dropper generator that uses bits from external sources
Python
96
star
14

spacebin

Spacebin is a proof-of-concept malware that exfiltrates data (from No Direct Internet Access environments) via triggering AV on the endpoint and then communicating back from the AV's cloud component.
Python
85
star
15

CortexVortex

Python
68
star
16

backdoros

backdorOS is an in-memory OS written in Python 2.7 with a built-in in-memory filesystem, hooks for open() calls and imports, Python REPL etc.
Python
65
star
17

aikido_wiper

Python
63
star
18

Spooler

C
57
star
19

DoubleDrive

A fully-undetectable ransomware that utilizes OneDrive to encrypt target files
Python
54
star
20

AltFS

The Alternative Fileless File System
Python
54
star
21

RSFW

Request Smuggling Firewall
C++
43
star
22

HRS

Perl
43
star
23

cachetalk

Proof-of-concept program that is able to read and write arbitrary bits using HTTP server-side caching
Python
36
star
24

BACE

Mapping of Binaries that allows Arbitrary Code Execution
24
star
25

CoWTools

Tools for analyzing Windows containers and break container's isolation
C++
21
star
26

blog-snippets

Repository of Code Snippets from various SafeBreach Blog posts
Python
5
star