
PowerShell-Suite
My musings with PowerShell

My musings with PowerShell

Parses Go binaries to recover symbols, function metadata, types, file paths, and embedded strings, including stripped or UPX-packed samples, with IDA…

Security profiling for blackbox iOS

Parses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…

A generic game/software hacking tool written from the ground up in Rust.

Runtime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

Modular malware analysis artifact collection and correlation framework

A Generic Windows Memory Scraping Tool

Python dumper/explorer for MCD Runtime Projects used by ODIS

SVG Analysis and generation tools for commonly seen SVG attachment phishing

Standalone zero-driver Windows system and API monitor in Rust

iOS Syscall Explorer for IDA 9.X

A minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.

Local-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…

Reverse engineering analysis of Formbook, an info-stealer that uses .NET assembly manipulation and XOR decryption. Full payload extracted via x32dbg,…

Reverse engineering Amadey Loader with x64dbg: dynamic API resolution, token privilege escalation, keylogger hooks, clipboard capture, and…