Skip to content
@Maldev-Academy

Maldev Academy

A learning academy offering module-based offensive security training and resources

Pinned Loading

  1. DumpBrowserSecrets DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers …

    C 828 130

  2. ExecutePeFromPngViaLNK ExecutePeFromPngViaLNK Public

    Extract and execute a PE embedded within a PNG file using an LNK file.

    Python 481 74

  3. ElectronVulnScanner ElectronVulnScanner Public

    Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.

    C 164 10

  4. TrapFlagForSyscalling TrapFlagForSyscalling Public

    Bypass user-land hooks by syscall tampering via the Trap Flag

    C 143 22

  5. AlphabeticalPolyShellGen AlphabeticalPolyShellGen Public

    Generate an Alphabetical Polymorphic Shellcode

    C 148 26

  6. 3LayersPersistence 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    C 107 14

Repositories

Showing 10 of 24 repositories
  • ApiHashing Public

    Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.

    Maldev-Academy/ApiHashing's past year of commit activity
    C 67 10 0 0 Updated Oct 7, 2026
  • DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)

    Maldev-Academy/DumpBrowserSecrets's past year of commit activity
    C 828 MIT 130 3 0 Updated May 31, 2026
  • HellHall Public

    Performing Indirect Clean Syscalls

    Maldev-Academy/HellHall's past year of commit activity
    C 632 MIT 79 0 1 Updated May 2, 2026
  • 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    Maldev-Academy/3LayersPersistence's past year of commit activity
    C 107 MIT 14 0 0 Updated Mar 29, 2026
  • QRSteganography Public

    Encodes arbitrary data into one or more QR code PNGs and decodes them back as a form of steganography for data obfuscation.

    Maldev-Academy/QRSteganography's past year of commit activity
    C 50 MIT 7 0 0 Updated Mar 9, 2026
  • GitLabDeviceCodePhishing Public

    A tool to easily perform GitLab Device Code Phishing on red team engagements

    Maldev-Academy/GitLabDeviceCodePhishing's past year of commit activity
    Python 54 MIT 7 0 0 Updated Feb 9, 2026
  • GitHubDeviceCodePhishing Public

    A tool to easily perform GitHub Device Code Phishing on red team engagements

    Maldev-Academy/GitHubDeviceCodePhishing's past year of commit activity
    Python 101 MIT 15 0 0 Updated Feb 9, 2026
  • PrefetchFileParser Public

    A lightweight Windows Prefetch file parser to extract programs' execution history

    Maldev-Academy/PrefetchFileParser's past year of commit activity
    C 75 MIT 8 0 0 Updated Jan 12, 2026
  • DumpChromeSecrets Public archive

    Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

    Maldev-Academy/DumpChromeSecrets's past year of commit activity
    C 557 MIT 80 0 0 Updated Jan 8, 2026
  • GhostlyHollowingViaTamperedSyscalls2 Public

    Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection

    Maldev-Academy/GhostlyHollowingViaTamperedSyscalls2's past year of commit activity
    C 77 MIT 15 0 0 Updated Dec 26, 2025