
Bypass_AV
Evades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…

Evades AV and sandboxes on Windows using anti-sandbox checks, ntdll unhooking, dynamic API resolution, and multi-layer shellcode obfuscation…

A technique that mixes NTDLL unhooking and hellsgate gate varients

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level

Proof-of-concept exploit for CVE-2024-0311 bypassing Skyhigh Client Proxy policy via process injection and named pipe manipulation, with custom…

Generates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion…

A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Dynamically invoke arbitrary unmanaged code

Patching ROP-encoded shellcodes into PEs


Indirect syscalls + DInvoke made simple.

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

AV/EDR evasion via direct system calls.

AV/EDR evasion via direct system calls.

Converts PE into a shellcode

Hide your Powershell script in plain sight. Bypass all Powershell security features