
GwisinMsi
PoC MSI payload based on ASEC/AhnLab's blog post

PoC MSI payload based on ASEC/AhnLab's blog post

Compares Windows archiver support for Mark of the Web propagation, helping teams assess which tools preserve MOTW and mitigate macro-based malware…

Malware Mutation Using Reinforcement Learning and Generative Adversarial Networks

Improve your security and privacy by blocking ads, tracking and malware domains.

Curated list of backdoor learning papers, surveys, and toolboxes, organizing poisoning-based attacks and defenses in deep learning for researchers…

PoCs and tools for investigation of Windows process execution techniques

A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by…

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

Curated reading list and taxonomy of attack and defense research for mobile on-device AI systems, covering adversarial, backdoor, model stealing, and…

Research demonstration of indirect prompt injection attacks to control autonomous LLM-based web agents, with tools for trigger optimization and…

Adversary Emulation Framework

Lifetime AMSI bypass

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…

Windows 11 24H2-25H2 Runtime PatchGuard Bypass

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

Research-only AI watermark robustness toolkit: local reverse proxy strips C2PA/EXIF/XMP, Unicode, image/audio stego, OOXML/PDF metadata, and scans…

Purple-team telemetry & simulation toolkit.