🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Converts PE into a shellcode

Converts a EXE into DLL

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.

Post-exploitation tool for hiding processes from monitoring applications

Inline syscalls made easy for windows on clang

Live hunting of code injection techniques

Local privilege escalation PoC exploit for CVE-2019-16098

Example code for using named pipe output with beacon ReflectiveDLLs

Dump system call codes, names, and offsets from Ntdll.dll