NUL0x4C

AtomPePacker

A Highly capable Pe Packer

AtomLdr

A DLL loader with advanced evasive features

TerraLdr

A Payload Loader Designed With Advanced Evasion Features

APCLdr

Payload Loader With Evasion Features

KnownDllUnhook

Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs

NoRunPI

Run Your Payload Without Running Your Payload

HellShell

transform your payload into ipv4/ipv6/mac arrays

DeleteShadowCopies

Deleting Shadow Copies In Pure C++

EtwSessionHijacking

A Poc on blocking Procmon from monitoring network events

Syscallslib

a library that automates some clean syscalls to make it easier to implement

Ultra

A Small Poc On An Encryption/Decryption Algorithm Used As A File Locker

ManualRsrcDataFetching

Get your data from the resource section manually, with no need for windows apis

GP

using the gpu to hide your payload

T.D.P.

Using Thread Description To Hide Shellcodes

RecycleBinPersistence

using the Recycle Bin to insure persistence

KctHijackLib

using the kct to run your shellcode the apt style

PerunsFart

replace and unhook ntdll from a suspended process

ToasterLoader

just a stupid way to run a payload

AsmLogger

asm keylogger that handles special characters and writes to a file

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

EDRs

FOLIAGE

Public variation of FOLIAGE ( original developer )

process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

Ekko

Sleep Obfuscation

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

NUL0x4C

openbsd

Source code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to tech@openbsd.org, instead of submitting pull requests, since this tree is often rebased.

transacted_hollowing

Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging

KaynLdr

KaynLdr is a Reflective Loader written in C/ASM

VX-API

Collection of various malicious functionality to aid in malware development