KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

Initial Access and Post-Exploitation Tool for AAD and O365 with a browser-based GUI

A Blazing fast Security Auditing tool for Kubernetes

Cobalt Strike UDRL for memory scanner evasion.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

Sleep Obfuscation

WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API

UDRL for CS

基于rustdesk修改的远程桌面软件，将agent部分分离出来

Multi-tool reverse engineering collaboration solution.

Translates WinDbg "dt" structure dump to a C structure

An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples

Compile shellcode into an exe file from Windows or Linux.

A C# implementation that disables Windows Firewall bypassing UAC