Lightweight PoC enumerating processes and reading remote PEBs for triage and research.

Dossier dédié à WinIBW, notamment des scripts

Spectral DCM pipeline for rs-fMRI effective connectivity and dementia conversion analysis.

Energy performance of buildings

API to simplify web development. Comply with the MIT license open source agreement. In line with most jQuery writing habits.

CLI Wrapper for Bleak library.

Custom implementations of WinAPI functions GetProcAddress and GetModuleHandle by traversing low level Windows data structures.

Hiding a module

Little tool and (header-only lib) to investigate Windows Internals. Shout out to @zodiacon. No pull requests (this is actually a mirrored Mercurial repo).

🛠️ Enhance your application's stealth by resolving WinAPI calls through PEB walking, keeping your import table clean and hidden from scrutiny.

Imports Reconstructor via indirect syscalls (Scylla rebuilt with SysCaller)

Uses the PEB to obtain an apisetmap in order to translate umbrella DLL's such as "api-ms-win-http-time-l1-1-0.dll" to their origin forward DLL e.g. kernelbase.dll

PoC shellcode injector using clean syscalls to bypass user-mode hooks in ntdll.dll

Compile-time string encryption and import obfuscation for Windows PE32(+) binaries

Tiny C header that allows easy hiding of WinAPI imports via PEB

Debugger checks in 3 ways

POC of a better implementation of GetProcAddress for ntdll using binary search

XNTSV program for detailed viewing of system structures for Windows.