Popular repositories Loading

1. Killer Killer Public

   Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.

   C++ 843 133

2. HuffLoader HuffLoader Public

   Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.

   C 308 44

3. KernelCallbackTable-Injection-PoC KernelCallbackTable-Injection-PoC Public

   Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow.

   C 275 38

4. UnCanny UnCanny Public

   Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin resolution experiments

   C 89 12

5. APT-Attack-Simulation APT-Attack-Simulation Public

   Projected developed for fun only that simulates APT 29 and Lockbit TTPs, showcasing phishing, ISO execution, and DLL proxying for persistence and privilege escalation.

   HTML 61 12

6. ShellHWEventExec ShellHWEventExec Public

   BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEventHandler flow + ssh-shellhost.exe direct PTY command executi…

   C 39 7