Popular repositories Loading

1. slywalker slywalker Public

   A stealthy PEB walker for x64 Windows. Demonstrates EDR evasion by manually parsing the PEB via assembly to resolve kernel32.dll base addresses. It bypasses IAT scanners and API hooks, and provides…

   Go 6

2. memstab memstab Public

   Zero-file, LotL command for memory-resident binary execution. Bypasses EDR vectors by leveraging memfd_create and os.execve to pivot from an obfuscated Base85/Bit-Shift one-liner to a fileless proc…

   Python 3

3. siliconhook siliconhook Public

   Ring -1 engine for MitM attacks on CPU registers. Leverages $DR0$-$DR7$ for zero-footprint interception, real-time data sniffing, and active argument tampering via WriteProcessMemory. Facilitates E…

   Rust 3

4. sharedtears sharedtears Public

   PoC for T1055.008 & T1574.002. Performs non-cooperative injection & resource acquisition via ptrace. ABI-level register hijacking, zero-footprint context restoration, and stealthy SO handle acquisi…

   Rust 3

5. winstalk winstalk Public

   A naive and simple post-exploit recon script for Windows. Triages risk (unquoted paths, suspect PIDs), maps process-to-network activity, and performs deep registry/DLL crawls.

   Python 3

6. pamper pamper Public

   Python script to demonstrate a Skeleton Key attack. Compiles a custom C-based PAM module to establish a universal master password for any user including root, while original credentials remain active.

   Python 3