
Blackbone
Windows memory hacking library

Windows memory hacking library

PoCs and tools for investigation of Windows process execution techniques

Python antivirus evasion tool

A Generic Windows Memory Scraping Tool

Python Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....

Unsigned Kernel Mode Driver that does memory modifications

How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver

This is an exploit for CVE-2017-7047, Works on 10.3.2 and below.

Kernel Driver for x64 Window System which allows you to read/write Virtual/Physical Memory hooking Win32k

My musings with PowerShell

Runtime process analysis and memory hacking MCP server for AI agents. Supports dynamic extension loading, read-only mode, audit logging, and…

Captures Windows Hello PINs at entry by injecting a DLL into LogonUI.exe that sets a CPU hardware breakpoint on NgcSerializeConvenienceCredential,…

Hardware breakpoint hooking engine for Windows that uses debug registers to hook functions, bypass ETW/AMSI, and evade user-land EDR monitoring.

Windows command-line utility for reading, writing, and executing kernel-mode code from Administrator context using a font validation execution…

A BOF designed to inspect processes memory and addresses