
LolModapi
Local privilege escalation exploit for MSI Dragon Center's MODAPI.sys driver, abusing unauthenticated MSR writes to bypass SMEP and gain SYSTEM.

Local privilege escalation exploit for MSI Dragon Center's MODAPI.sys driver, abusing unauthenticated MSR writes to bypass SMEP and gain SYSTEM.

A shellcode function to encrypt a running process image when sleeping.

Windows x64 handcrafted token stealing kernel-mode shellcode

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.

Nim Library for Offensive Security Development

Apply a divide and conquer approach to bypass EDRs

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can…

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall…

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

PoC demonstrating a multi process injection chain aimed at remotely executing shellcode

Execute shellcode files with rundll32

Indirect syscalls + DInvoke made simple.

Dynamically invoke arbitrary unmanaged code

Evades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…

PoC for popping a system shell against the LnvMSRIO.sys driver

Dynamic shellcode loader with sophisticated evasion capabilities