
SigFlip
SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Generate Proxy DLLs in Rust

find dll base addresses without PEB WALK

Abuses the Microsoft-signed tlscsp.dll LOLBin to run RC4 encrypt/decrypt via LsCsp_EncryptHwid, patching the hardcoded key in memory for BYOK…

Activation Context Hijacking Evasion Tool

Lateral Movement Using DCOM and DLL Hijacking

Local & remote Windows DLL Proxying

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

Local privilege escalation exploit for CVE-2021-1675 (PrintNightmare) that installs a malicious DLL to gain SYSTEM access on vulnerable Windows…

CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation

Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…

Reproduction of CVE-2023-34312 using two malicious DLL files to exploit QQ and TIM messaging applications for security research and testing.

DLL hijacking to rev shell

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

UAC bypass for x64 Windows 7 - 11

CVE-2025-56383-Proof-of-Concept

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…