Skip to content
@Maldev-Academy

Maldev Academy

A learning academy offering module-based offensive security training and resources

Pinned Loading

  1. DumpBrowserSecrets DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers …

    C 814 127

  2. ExecutePeFromPngViaLNK ExecutePeFromPngViaLNK Public

    Extract and execute a PE embedded within a PNG file using an LNK file.

    Python 479 74

  3. ElectronVulnScanner ElectronVulnScanner Public

    Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.

    C 163 11

  4. TrapFlagForSyscalling TrapFlagForSyscalling Public

    Bypass user-land hooks by syscall tampering via the Trap Flag

    C 142 21

  5. AlphabeticalPolyShellGen AlphabeticalPolyShellGen Public

    Generate an Alphabetical Polymorphic Shellcode

    C 146 26

  6. 3LayersPersistence 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    C 101 13

Repositories

Showing 10 of 23 repositories
  • DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)

    Maldev-Academy/DumpBrowserSecrets's past year of commit activity
    C 814 MIT 127 2 0 Updated May 31, 2026
  • HellHall Public

    Performing Indirect Clean Syscalls

    Maldev-Academy/HellHall's past year of commit activity
    C 628 MIT 80 0 1 Updated May 2, 2026
  • 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    Maldev-Academy/3LayersPersistence's past year of commit activity
    C 101 MIT 13 0 0 Updated Mar 29, 2026
  • QRSteganography Public

    Encodes arbitrary data into one or more QR code PNGs and decodes them back as a form of steganography for data obfuscation.

    Maldev-Academy/QRSteganography's past year of commit activity
    C 48 MIT 7 0 0 Updated Mar 10, 2026
  • GitLabDeviceCodePhishing Public

    A tool to easily perform GitLab Device Code Phishing on red team engagements

    Maldev-Academy/GitLabDeviceCodePhishing's past year of commit activity
    Python 51 MIT 6 0 0 Updated Feb 9, 2026
  • GitHubDeviceCodePhishing Public

    A tool to easily perform GitHub Device Code Phishing on red team engagements

    Maldev-Academy/GitHubDeviceCodePhishing's past year of commit activity
    Python 98 MIT 14 0 0 Updated Feb 9, 2026
  • PrefetchFileParser Public

    A lightweight Windows Prefetch file parser to extract programs' execution history

    Maldev-Academy/PrefetchFileParser's past year of commit activity
    C 70 MIT 7 0 0 Updated Jan 12, 2026
  • DumpChromeSecrets Public archive

    Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

    Maldev-Academy/DumpChromeSecrets's past year of commit activity
    C 559 MIT 76 0 0 Updated Jan 8, 2026
  • GhostlyHollowingViaTamperedSyscalls2 Public

    Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection

    Maldev-Academy/GhostlyHollowingViaTamperedSyscalls2's past year of commit activity
    C 76 MIT 14 0 0 Updated Dec 26, 2025
  • ElectronVulnScanner Public

    Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.

    Maldev-Academy/ElectronVulnScanner's past year of commit activity
    C 163 MIT 11 0 0 Updated Nov 28, 2025