TaxMachine

nim-syscall

Raw system calls for Nim

regreSSHion

CVE-2024-6387 (regreSSHion) Exploit (PoC), a vulnerability in OpenSSH's server (sshd) on glibc-based Linux systems.

windows-kernel-trojan

A windows kernel mode driver that spoofs serial numbers when mapped and executes a malicious payload (FULLY from kernel!!!)

memzip

A simple wrapper in Go for creating archives in memory

Prince-Ransomware

Go ransomware utilising ChaCha20 and ECIES encryption.

TDE

A devirtualization engine for Themida.

deoptimizer

Evasion by machine code de-optimization.

nvidium

Fast minecraft rendering backend for sodium (nvidia only)

Useful-COM-WMI

Some Nim and Powershell snippets for (ab)using COM and WMI for various useful purposes.

stuffbin

Compress and embed static files and assets into Go binaries and access them with a virtual file system in production

JNIStuff

Just a JNI DLL for cracking a checker with keyauth

Doge-TypeUnhook

type ntdll.dll for dll unhooking

ThunderKitty

🔑 Open source stealer written in Go, all logs will be sent to Telegram bot.

fyne

Cross platform GUI toolkit in Go inspired by Material Design

Epicgames-Xal

Reversed 'Xal' value for epicgames.com

Handle-Ripper

Windows handle hijacker

simdjson

Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks

hcaptcha-reverse

hCaptcha hsw reverse engineered

EDR-XDR-AV-Killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

CallStackMasker

A PoC implementation for dynamically masking call stacks with timers.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

enderdragon

Ghidra in Minecraft

no-defender

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

execve-asm

Executing a command with ASM

DiscordIPC

Connect locally to the Discord client using IPC for a subset of RPC features like Rich Presence and Activity Join/Spectate

phobot

CrystalPvP robot

ETWInspector

imgui-console

Console Widget for Dear ImGui

CLR-Injection

Use CLR to inject all the .NET apps

github-stats-transparent

Automatically generate summary GitHub statistics images for your profile using Actions, no server required