CVE-2026-0827 PoC

The code I write in my blog

Battery, BIOS, CPU - processor, storage drive, keyboard, RAM - memory, monitor, motherboard, mouse, NIC - network adapter, printer, sound card - audio card, graphics card - video card. Hardware.Inf…

MM-Wiki 一个轻量级的企业知识分享与团队协同软件，可用于快速构建企业 Wiki 和团队知识分享平台。部署方便，使用简单，帮助团队构建一个信息共享、文档管理的协作环境。

Proof of Concept CVE-2025-24990 (Agere Systems's driver)

C++17 PE manualmapper

RetDec is a retargetable machine-code decompiler based on LLVM.

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

A multi-platform support c++11 library with focus on asio (asynchronous socket I/O) for any client applications.

Desktop application for Windows to read, modify and write shortcut files (.lnk) with ease.

7z exploit POC versions prior to 25.01

Advanced WinRAR Path Traversal Exploit Tool for CVE-2025-8088

PandaWiki 是一款 AI 大模型驱动的开源知识库搭建系统，帮助你快速构建智能化的 产品文档、技术文档、FAQ、博客系统，借助大模型的力量为你提供 AI 创作、AI 问答、AI 搜索等能力。

Polaris: An LLVM-based obfuscator that protects software at various levels

AdaptixFramework Extension Kit

AdaptixC2 is a highly modular advanced redteam toolkit

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Editor for qt stylesheet (qss). Real-time preview, and user can define varibles in qss.

Stack integrity verification to Detect SleepMask or CallStack Spoofer

A GUI version of the classic PoolMon tool

Kernel Pool Monitor

Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB获取ntdll和kernel32的地址。

GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。

link is a command and control framework written in rust

Medigate plugin for c++ reverse engineering and other utils

Starlark in Go: the Starlark configuration language, implemented in Go

Elastic Security Labs releases

TNT Unicode controls for Delphi. Last free version before source code was sold.

Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techniques

A C++ library for interacting with JSON.