
EDRSilencer
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

An information security preparedness tool to do adversarial simulation.

A tool for generating .NET serialized gadgets that can trigger .NET assembly load/execution when deserialized using BinaryFormatter from JS/VBS/VBA…

image scaling attacks for multi-modal prompt injection

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows…

This is the tool to dump the LSASS process on modern Windows 11

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

Tools and PoCs for Windows syscall investigation.


A windows token impersonation tool

A tool to find folders excluded from AV real-time scanning using a time oracle

A PoC ransomware sample to test out your ransomware response strategy.

Malware Mutation Using Reinforcement Learning and Generative Adversarial Networks

A productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)

Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.