infobyte/evilgrade
Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. observed · 2026-08-28
Health v2 · maintenance only
23/100
- Activity 0
- Release rhythm 8
- Longevity 100
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 4881
- days_rel: n/a
- days_push: 1827
- n_releases_24m: 0
Adoption not part of the score
1326 stars · 275 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Evilgrade is a modular penetration testing framework that exploits poor software update implementations by injecting fake updates via DNS manipulation and man-in-the-middle scenarios. It ships with pre-made agent binaries, default configurations for fast pentests, and built-in web and DNS server modules covering dozens of popular applications.
Use cases
- simulate fake update attacks during a pentest
- test whether software updaters validate signatures
- demonstrate ARP spoofing or DNS cache poisoning risks
- deliver a payload through a hijacked update channel
- train red teamers on MITM update exploitation
When to choose
- you need to test update mechanisms against MITM attacks
- you want a ready-made framework with modules for many applications
- you are doing authorized red team or security research work
When to avoid
- you need a general-purpose exploitation framework like Metasploit
- you want actively maintained tooling with recent updates
- you lack authorization to test target networks
Facets
framework · maturity maintenance
penetration-testing security http-server web-scraping security penetration-testing networking windows cross-platform cli fake-updates mitm dns-spoofing payload-delivery perl update-hijacking linux macos
7 sources
- readme: https://github.com/infobyte/evilgrade · fetched 2026-08-28 · 66eb035767d4
- homepage: https://www.faradaysec.com/ · fetched 2026-08-29 · 3d723988fb85
- site_page: https://faradaysec.com/about-us · fetched 2026-08-29 · a3b9e91f7546
- site_page: https://docs.faradaysec.com/ · fetched 2026-08-29 · 774e758c744c
- site_page: https://faradaysec.com/platform/integrations · fetched 2026-08-29 · 3b8a56a82e46
- site_page: https://faradaysec.com/pricing · fetched 2026-08-29 · e2e03824be74
- site_page: https://faradaysec.com/platform-pricing · fetched 2026-08-29 · 783308084f96
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| infobyte/evilgrade | main | 23 |
For agents
markdown · JSON · MCP: product_card(name="infobyte/evilgrade")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem