
NTDLL-reconstruction
A technique that mixes NTDLL unhooking and hellsgate gate varients

A technique that mixes NTDLL unhooking and hellsgate gate varients

Hides arbitrary payloads in PNG images using nibble-to-ASCII encoding and Fibonacci LSB steganography, with a C++ loader that extracts and executes…

Minimal Windows x64 reflective PE mapper that loads DLLs from memory without LoadLibrary, resolves exports, and dispatches calls through a…

Windows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…

A PoC on how to use a Compute Shader as Payload

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and…

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

Reverse Shell Detection with Machine Learning

Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer

Detection reverse shell and kill it before trying shell.

Assist reverse tcp shells in post-exploration tasks

Create fake certs for binaries using windows binaries and the power of bat files

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Shellcode injection technique. Given as C++ header, standalone Rust program or library.