HDZero Document Website

Theme for the Hugo static website generator

A 1x1x1m cube with 1200 addressable LEDs

A tag-based manager for packing lists

Activation Context Hijack

New generation of wmiexec.py

Fileless atexec, no more need for port 445

LSASS memory dumper using only NTAPIs, creating a minimal minidump, built in Rust with no_std and independent of the C runtime (CRT). It supports XOR encryption and remote file transmission.

Tool to remotely dump secrets from the Windows registry

64-bit, position-independent implant template for Windows in Rust.

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

Continuous password spraying tool

Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation firewalls en route to the target.

Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection

ROP-based sleep obfuscation to evade memory scanners

A PoC .NET-specific process injection tool

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

Source for kiosk.vsim.xyz -- tooling for browser-based, Kiosk mode testing.

A COFF loader made in Rust

Lateral Movement Using DCOM and DLL Hijacking

A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge years ago.

MOGWAI LABS JMX exploitation toolkit

Also known by Microsoft as Knifecoat 🌶️