🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Converts PE into a shellcode

Converts a EXE into DLL

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.

Post-exploitation tool for hiding processes from monitoring applications

Inline syscalls made easy for windows on clang

Live hunting of code injection techniques

Example code for using named pipe output with beacon ReflectiveDLLs

Dump system call codes, names, and offsets from Ntdll.dll