Skip to content
@Maldev-Academy

Maldev Academy

A learning academy offering module-based offensive security training and resources

Pinned Loading

  1. DumpBrowserSecrets DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers …

    C 820 127

  2. ExecutePeFromPngViaLNK ExecutePeFromPngViaLNK Public

    Extract and execute a PE embedded within a PNG file using an LNK file.

    Python 476 72

  3. ElectronVulnScanner ElectronVulnScanner Public

    Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.

    C 163 10

  4. TrapFlagForSyscalling TrapFlagForSyscalling Public

    Bypass user-land hooks by syscall tampering via the Trap Flag

    C 141 21

  5. AlphabeticalPolyShellGen AlphabeticalPolyShellGen Public

    Generate an Alphabetical Polymorphic Shellcode

    C 147 25

  6. 3LayersPersistence 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    C 105 13

Repositories

Showing 10 of 24 repositories
  • ApiHashing Public

    Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.

    Maldev-Academy/ApiHashing's past year of commit activity
    C 34 2 0 0 Updated Oct 7, 2026
  • DumpBrowserSecrets Public

    Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and Gecko-based browsers (Chrome, Microsoft Edge, Firefox, Opera, Opera GX, and Vivaldi)

    Maldev-Academy/DumpBrowserSecrets's past year of commit activity
    C 820 MIT 127 3 0 Updated May 31, 2026
  • HellHall Public

    Performing Indirect Clean Syscalls

    Maldev-Academy/HellHall's past year of commit activity
    C 630 MIT 79 0 1 Updated May 2, 2026
  • 3LayersPersistence Public

    Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime

    Maldev-Academy/3LayersPersistence's past year of commit activity
    C 105 MIT 13 0 0 Updated Mar 29, 2026
  • QRSteganography Public

    Encodes arbitrary data into one or more QR code PNGs and decodes them back as a form of steganography for data obfuscation.

    Maldev-Academy/QRSteganography's past year of commit activity
    C 50 MIT 7 0 0 Updated Mar 10, 2026
  • GitLabDeviceCodePhishing Public

    A tool to easily perform GitLab Device Code Phishing on red team engagements

    Maldev-Academy/GitLabDeviceCodePhishing's past year of commit activity
    Python 53 MIT 6 0 0 Updated Feb 9, 2026
  • GitHubDeviceCodePhishing Public

    A tool to easily perform GitHub Device Code Phishing on red team engagements

    Maldev-Academy/GitHubDeviceCodePhishing's past year of commit activity
    Python 100 MIT 15 0 0 Updated Feb 9, 2026
  • PrefetchFileParser Public

    A lightweight Windows Prefetch file parser to extract programs' execution history

    Maldev-Academy/PrefetchFileParser's past year of commit activity
    C 71 MIT 7 0 0 Updated Jan 12, 2026
  • DumpChromeSecrets Public archive

    Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks

    Maldev-Academy/DumpChromeSecrets's past year of commit activity
    C 555 MIT 75 0 0 Updated Jan 8, 2026
  • GhostlyHollowingViaTamperedSyscalls2 Public

    Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection

    Maldev-Academy/GhostlyHollowingViaTamperedSyscalls2's past year of commit activity
    C 76 MIT 14 0 0 Updated Dec 26, 2025