Repositories list

• TrapFlagForSyscalling

  Public
  Bypass user-land hooks by syscall tampering via the Trap Flag

  C

  •

  MIT License

  •19•116•0•0•Updated Aug 25, 2025Aug 25, 2025

• AlphabeticalPolyShellGen

  Public
  Generate an Alphabetical Polymorphic Shellcode

  C

  •

  MIT License

  •20•116•0•0•Updated Aug 19, 2025Aug 19, 2025

• Alphabetfuscation

  Public
  Convert your shellcode into an ASCII string

  C

  •

  MIT License

  •27•118•0•0•Updated Jun 27, 2025Jun 27, 2025

• HookingLsassForCredentials

  Public
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials

  C

  •

  MIT License

  •15•51•0•0•Updated May 12, 2025May 12, 2025

• LsassHijackingViaReg

  Public
  Injecting DLL into LSASS at boot

  C

  •

  GNU General Public License v3.0

  •26•138•0•0•Updated Apr 29, 2025Apr 29, 2025

• GhostlyHollowingViaTamperedSyscalls

  Public
  Implementing the ghostly hollowing PE injection technique using tampered syscalls.

  C

  •

  GNU General Public License v2.0

  •0•170•1•0•Updated Mar 9, 2025Mar 9, 2025

• ExecutePeFromPngViaLNK

  Public
  Extract and execute a PE embedded within a PNG file using an LNK file.

  Python

  •

  MIT License

  •72•446•1•2•Updated Nov 2, 2024Nov 2, 2024

• EmbedPayloadInPng

  Public
  Embed a payload inside a PNG file

  C

  •

  MIT License

  •47•346•0•0•Updated Oct 24, 2024Oct 24, 2024

• DRMBinViaOrdinalImports

  Public
  Create Anti-Copy DRM Malware

  drmanti-reversinganti-analysis

  C

  •

  MIT License

  •15•65•0•0•Updated Aug 19, 2024Aug 19, 2024

• CodeSearchDemo

  Public
  C

  •

  MIT License

  •5•40•0•0•Updated Feb 20, 2024Feb 20, 2024

• RemoteTLSCallbackInjection

  Public
  Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

  C

  •

  MIT License

  •47•272•1•0•Updated Jan 21, 2024Jan 21, 2024

• Christmas

  Public
  C

  •

  MIT License

  •35•260•1•0•Updated Jan 21, 2024Jan 21, 2024

• MaldevAcademyLdr.1

  Public
  C

  •

  MIT License

  •50•363•0•0•Updated Sep 22, 2023Sep 22, 2023

• HellHall

  Public
  Performing Indirect Clean Syscalls

  syscallsedrs

  C

  •76•577•1•1•Updated Apr 19, 2023Apr 19, 2023