Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin rights required.

A .NET Runtime for Cobalt Strike's Beacon Object Files

Various Cobalt Strike BOFs

A library for loading dll module bypassing windows PE loader from memory (x86/x64)

Recovering NTLM hashes from Credential Guard

Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.

Cobalt Strike Beacon Object Files

Crystal Palace library for proxying Nt API calls via the Threadpool

Alternative Read and Write primitives using Rtl* functions the unintended way.