RE for champions

Getting arguments in asm. This can be used to bypass crt. If no arguments are found it will return the ImagePathName instead. Call from C.

Collection of Undocumented data I have discovered for Windows operating system

Reversing an interesting DLL I discovered. This is a collection of things I found.

Basic Bootloader and kernel soon

A collection of old papers I have sitting around by some old guys I look up too ;) and maybe some of mine thrown in there

A POC of defending your system and Users from the popular ClickFix attack

A walkthrough on bruteforcing struct sizes with just a for loop and some ASM

some asm helper files

Custom disk format for storing whatever you can think of and also reading it back out

trapping a function call using an invalid Instruction, UD2, allowing for a 2 byte hook

digging inside of code caves

TPP - The People Packer is a lightweight entropy based packer for on the fly packing of executables into a custom format. It really shines with shellcode and has a -m for extra mutation.

Enumerate all Objects in from the Kernel Object Manger, the heart of Windows.

Uncovering an undocumented API to get the CPU ghz and status

Working with VEH and extracting functions, this is the base for an injectable DLL that can be used as an introspection tool, I will continue to update this and add it to my debugger

A dll I put together to inject into a process and RE undocumented apis

a tool for extracting exported functions from .so files

Scan a file on disk to check if it has cfg enabled and also checks for xfg in system apps

A scanner I built to discover control codes in all running drivers

Pulls the .text section of any PE. Useful for debugging and RE. Option to save .text to a .bin file and walking it byte by byte.

I have been diving into some of the PEB bitfields. During my research I discovered isAppContainer and wanted to share my thoughts.

A encryption scheme I wrote up and is the base for Xor-Like-An-Eagle.txt

A stealthy Hook with minimal API footprint

This program takes in a single parameter, a dll on disk, and retrieves all the function names for it. Try it on ntdll.dll, it will return all nt function names. This is useful for RE and exploring …

A hex converter I wrote that works for converting strings and files to hex