
SyscallRevenant
Clean Indirect Syscalls with Syscall Tampering.

Clean Indirect Syscalls with Syscall Tampering.

Untethered + Unsandboxed code execution haxx as root on iOS 14 - iOS 14.8.1.

Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap

My experiments in weaponizing Nim (https://nim-lang.org/)

Rust Weaponization for Red Team Engagements.

Working POC of Mikrotik exploit from Vault 7 CIA Leaks

Reflective PE packer.

Patch Binaries via MITM: BackdoorFactory + mitmProxy.

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

Educational repository of offensive security source code: remote shells, ELF injectors, crypters, memory injection, and droppers for Linux,…

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and…

Collection of Windows internals research and exploitation techniques covering privilege escalation, token abuse, and post-exploitation tricks for red…

CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS.…

Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.

MikroTik remote jailbreak for v6.x.x

Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace.

Rust crate for ghost-frame call-stack spoofing, runtime indirect syscalls, and APC injection on Windows x64. Provides SSN resolution, JIT stub…

A fully implemented kernel exploit for the PS4 on 5.05FW