Just an idiot building offensive security tools.
🇫🇷
Joined November 2025
- Tweets30
- Following56
- Followers251
- Likes124
Discover KHAØS C2, a post-exploitation framework designed to blend into enterprise environments by routing traffic through trusted services like Teams, GitHub, and DNS.
Built with modern evasion techniques and a complete post-exploitation toolkit.
github.com/28Zaaky/khaos-c2
The agent runs execute-assembly in-process, loads BOF/COFF objects, and supports four injection techniques including module stomping. On the credential side, it dumps LSASS, Kerberoasts, grabs SAM hives, and handles token manipulation with getsystem and UAC bypass.
Pivoting works through SOCKS5, reverse port forward, or SMB named pipes. Everything runs under indirect syscalls with ETW and AMSI bypassed through hardware breakpoints, sleep obfuscation, and call stack spoofing.
#RedTeam #C2 #OffensiveSecurity #Pentesting #InfoSec #MalwareDev
Here is my own keylogger that captures every keystroke on a Windows system, including special characters and unicode.
It tracks which window is active and logs everything to a file in the temp directory with a random name.
github.com/28Zaaky/Stealth-K…
Here is ShellCrypt, an AES-256-CBC shellcode encryption tool for Windows.
github.com/28Zaaky/SHELLCRYP…
_Z4vky retweeted
Looking for a fast signature scanner (AOB scanner)?
I built my own optimized implementation focused on performance and simplicity.
Feedback is welcome.
github.com/Bourdon94m/SigHun…
After months of development, I'm open-sourcing KHAØS C2, a post exploitation framework I built from scratch.
KHAOS is a modern C&C framework that routes agent traffic through cloud services already trusted by
enterprise networks
[REPOST]
github.com/28Zaaky/khaos-c2
My own reflective dll loader, used in KhaosC2
github.com/28Zaaky/ShdwLdr
A lot of exciting features are on the way: cross-platform support, new kernel capabilities for the agent, major UI improvements, more payloads (linux, windows and android), and much more.
ALT Actual features
This quoted post is unavailable.
Check out my latest Medium article exploring inline hooking techniques used in rootkits.
Feedback is welcome!
medium.com/@28zaaky/inline-h…
