mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
- Quiet
- Application
- Lazarus
- GitHub
- ★ 1,513
- MIT

30,082 projects in the catalog.
Free Pascal, Lazarus and Delphi components, libraries and programs from GitHub, SourceForge, Codeberg, GitLab and more. Rate them, mark what looks interesting, and talk about them on their benches.
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
Crack any Microsoft Windows users password without any privilege (Guest account included)
Robber is open source tool for finding executables prone to DLL hijacking
Themida unpacker
An advanced tool for working with access tokens and Windows security policy.
An open-source, pentest and developer-oriented web browser, using the power of Lua
a unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)
Ask a TGS on behalf of another user without password
Mirror of users section of rootkit.com
Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript
User-friendly Microsoft Windows Debugger for Malware Analysts.
Private exe protector
TaurusTLS is an Indy add-on that provides OpenSSL 3.x and 4.x support to Indy. It depends on IndyLaz.
Networking Security In the Online Package Manager
Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file
OTP (RFC 4226, same as Google is using) for Delphi
Is your AWS perimeter secure? Use Powerpipe and Steampipe to check your AWS accounts for public resources, resources shared with untrusted accounts, insecure network configurations and more.
Application allows to block Internet access to other applications / Приложение позволяет заблокировать доступ в интернет другим приложения
Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode over DNS protocol
High-interaction Honeypot for PLCs and Industrial Control Systems
Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis without any user interaction.
一个开源的压缩壳
This tool provide "remote" signtool
Middleware for JWT in HORSE
Personal collection of Remote Administration Tool sources. Dedicated for Ax0nes Forum at Ax0nes.com for education purpose
Malicious Software SRC Extract
RunAsAttached is a program to run a console as another user and keep new console attached to caller console. Support reverse shell mode (Ex: Netcat)
Duplicate not owned Token from Running Process
TurboPack OnGuard VCL is a library to create demo versions of your Embarcadero Delphi and C++Builder VCL applications.
XtremeRAT SRC Extract
An open-source notepad with features that are particularly useful to penetration testers
Generate CycloneDX SBOMs for Delphi projects — EU Cyber Resilience Act compliance in one click
Middleware for Basic Authentication in HORSE
The JWA library aims to provide a conversion from C to Delphi of as many headers as possible from the PSDK etc. The JWSCL (security library) is an advanced object-oriented framework for programming with the Windows security features (ACL, Tokens, etc.)
Code Deobfuscator
Enables and use of the concept of security in your Delphi applications
conduct lateral movement attack by leveraging unfiltered services display name to smuggle binaries as chunks into the target machine
Code Deobfuscator x86_32/64
Delphi OAuth2 Authenticator Component
Time-Based One-Time Password (TOTP) projects in Delphi with Google Authenticator compatible PIN number generation
An authorization library that supports access control models like ACL, RBAC, ABAC in Delphi
Fast & Secure File Shredder
Powerful anti dumping & Anti reverse engineering protection
A collection of projects to augment the Indy project
Windows Password Brute by Stas'M
Library to create demo versions of your Delphi/FreePascal apps. Create versions that are time-limited, feature-limited, limited to a certain number of uses, etc. You could also protect executable from modification.
Security In the Online Package Manager
Protect and preventing access to specific memory regions, Protect sensitive data from exposed by other processes
A SAML implementation for Delphi developers
Helper functions and socket classes to perform TLS communication by means of WinAPI (SChannel)
Software Licensing System with Delphi
Learning and Examples Security
Simple RunAs program for Windows.
2-step verification greatly increases the security of your account, especially if your password is stolen. But how about adding this functionality to your Delphi application?
Authenticator TOTP (Delphi, FMX)
Learning and Examples Security
TurboPack OnGuard FMX is a library to create demo versions of your Embarcadero Delphi and C++Builder FMX applications.
Time-based one-time password for Delphi
Small Google OAuth 2.0 for Lazarus/FPC
Run individual controls or full compliance benchmarks for NSA CISA Kubernetes Hardening Guidance across all of your Kubernetes clusters using Powerpipe and Steampipe.
An RFC 6749 OAuth2 Client implemented as a Lazarus Package. The client is intended to be fully featured and supports the following grant types: Authorization Code Grant Implicit Grant Resource Owner Password Credentials Grant Client Credentials Grant. Attention has also been paid to extensibility. The client also provides: A means of implementing an Extension Grant, including new grant types. Support for new token types Support for New Endpoint Parameters, and Support for additional error codes. This OAuth2 Client uses an external User Agent - the System Web Browser - and incorporates in internal http server for handling redirect responses from an Authorization Server. The package uses the Indy Component library for both an http/https client and an http server. When the https protocol is used the OpenSSL library must also be installed and available for use. Multithreading support is required for Authorization Code and Implicit Grants. The package is written in Object Pascal and is made available under the Lesser GPL. The package requires the Indy package for http/https protocol support. It has been configured for use with the MWA Software IndySecOpenSSL package and the Indy Component Library. A separate branch (Indy106Compat) is also available. This will work with the Indy Component library on its own. However, you will be limited to using the unsupported OpenSSL 1.0.2 library (current is OpenSSL 3.x) and TLS 1.2. For installation instructions please refer to the User Guide.
Networking Security In the Online Package Manager