Espressif IoT Development Framework. Official development framework for Espressif SoCs.

A repository for learning various heap exploitation techniques.

Direct Memory Access (DMA) Attack Software

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

Course materials for Modern Binary Exploitation by RPISEC

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

LSASS memory dumper using direct system calls and API unhooking.

A memory-based evasion technique which makes shellcode invisible from process start to end.

Original C Implementation of the Hell's Gate VX Technique

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass…

The Definitive Guide To Process Cloning on Windows

MOpt-AFL provided by the paper "MOPT: Optimized Mutation Scheduling for Fuzzers"

Simple EDR implementation to demonstrate bypass

ScoopyNG — The VMware detection tool