NUL0x4C

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.md

Language:PowerShellMIT126500

Thread-Pool-Injection-PoC

Proof of concept code for thread pool based process injection in Windows.

Language:C++7800

x64win-DynamicNoNull-WinExec-PopCalc-Shellcode

64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free

Language:AssemblyMIT5400

llvm-yx-callobfuscator

LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

Language:CGPL-3.023700

APT_REPORT

Interesting APT Report Collection And Some Special IOC

Language:Python222100

StackBombing

Next gen process injection technique

Language:C++3900

insomnia

a stage1 DLL loader with sleep obfuscation

Language:CGPL-3.03100

GIUDA

Ask a TGS on behalf of another user without password

Language:Pascal45500

PrivFu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

Language:C#BSD-3-Clause68200

Win-Exploit-Inject

PoC for DEF CON 26: Playing Malware Injection with Exploit thoughts

Language:C++2400

DllNotificationInjection

A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.

Language:C++42000

PEInfo

Another Portable Executable files analysing stuff

Language:C++1700

Dirty-Vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

Language:C60000