File formats dissections and more...

AV/EDR evasion via direct system calls.

AV/EDR evasion via direct system calls.

Template-Driven AV/EDR Evasion Framework

A C2 post-exploitation framework

A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF)

A technique of hiding malicious shellcode via Shannon encoding.

A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.

64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free

64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"