{"repo":"cocomelonc/peekaboo","free":true,"listed":false,"github":"https://github.com/cocomelonc/peekaboo","clone":"git clone https://github.com/cocomelonc/peekaboo.git","description":"It bridges my research with a functional tool. I want to provide a safe, open-source framework for hackers to test evasion and for defenders to improve detection through hands-on learning.","language":"Python","stars":330,"topics":["malware-development","shellcode","xor","encryption","pe-files","injector","injection","obfuscation","cpp","aes"],"license":null,"category":"security-tools","readme_excerpt":"Peekaboo peekaboo is a modular framework designed to safely emulate malware behavior. It allows security researchers, red teamers, and blue teamers to reproduce complex threat scenarios - including Command & Control (C2) communication, persistence mechanisms, and lateral movement - without using destructive payloads. The goal of peekaboo is to accelerate detection engineering and operator training by providing predictable, reproducible, and safe threat artifacts. key features - malware source code template - build a payload/stealer from templates (select C2 channel & data collection modules). - payload generator - automated generation of C/C++ based payloads with built-in obfuscation (API hashing, string encryption). - AV/EDR bypass - encryption/encoding (syscalls) - multi-channel C2 - support for various covert channels: - standard HTTP/S - GitHub (abusing Issues/Commits) - Telegram & Discord Webhooks - TODO: adding all channels from one of my recent research - exfiltration - staged exfil to controlled endpoints (Github/Discord/Slack/VirusTotal/Azure DevOps/Angelcam). - evasive persistence - modular implementation of Windows persistence (Registry Run Keys, Winlogon, Screensaver). - lightweight dashboard - a python-based C2 backend and dashboard for real-time monitoring of active \"beacons\". - MITRE ATT&CK R&D - browse 200+ blog post techniques mapped to ATT&CK IDs with inline source code, LLM-extracted TTPs, and per-post GPU-precomputed briefs. - Malpedia integration - threat","default_branch":null,"files":null,"tree":[],"storefront":"/r/cocomelonc","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/cocomelonc/peekaboo/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}