Popular repositories Loading

1. Killer Killer Public

   Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.

   C++ 842 136

2. HuffLoader HuffLoader Public

   Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.

   C 287 42

3. KernelCallbackTable-Injection-PoC KernelCallbackTable-Injection-PoC Public

   Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijack execution flow with very detailed explanation.

   C 274 38

4. APT-Attack-Simulation APT-Attack-Simulation Public

   Projected developed for fun only that simulates APT 29 and Lockbit TTPs, showcasing phishing, ISO execution, and DLL proxying for persistence and privilege escalation.

   HTML 63 12

5. UnCanny UnCanny Public

   Another new coercion primitive with LPE 0day - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin resolution experiments

   C 27 2

6. InviGuard InviGuard Public

   Basic network sec tool for real-time threat detection and C2 communication prevention. Features 70+ detection modules, IOC integration, customizable alerts, and a dashboard with analytics. API-read…

   Python 17 3