
VBA-macro-experiments
Collection of VBA macro published in our twitter / blog

Collection of VBA macro published in our twitter / blog

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.


Windows 7 UAC Bypass Vulnerability in the Windows Script Host

Improved version of EKKO by @5pider that Encrypts only Image Sections


Execute PowerShell code at the antimalware-light protection level.

C2 redirector base on caddy

A technique to coerce a Windows SQL Server to authenticate on an arbitrary machine.

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Kali365 - EvilTokens Replica

A Poc on blocking Procmon from monitoring network events

Bypass the Event Trace Windows(ETW) and unhook ntdll.

Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell process is…

NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs

A Bumblebee-inspired Crypter