joaoviictorti

ssh-mitm

SSH-MITM - ssh audits made simple

UCMapper

Unknowncheats Magically Optimized Tidy Mapper using nvaudio

DeadPotato

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the original GodPotato source code by BeichenDream.

snixpc

XPC sniffer using LLDB

WinAltSyscallHandler

Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999

LayeredSyscall

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.

VivienneVMM

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

MiniVisorPkg

The research UEFI hypervisor that supports booting an operating system.

PageTableInjection

Code Injection, Inject malicious payload via pagetables pml4.

windbg-cheat-sheet

My personal cheat sheet for using WinDbg for kernel debugging

ac

kernel mode anti cheat

memflow

physical memory introspection framework

GhostMapper

GPU_ShellCode

ndisapi-rs

Rust crate for interacting with the Windows Packet Filter driver.

phnt-rs

Rust bindings to the System Informer's (formerly known as Process Hacker) "phnt" native Windows headers

Divert

WinDivert: Windows Packet Divert

process-cloning

The Definitive Guide To Process Cloning on Windows

RoustKit

Rust out-of-tree Linux Kernel Modules (LKMs) experimentation framework

shadow-rs

Windows Kernel Rootkit in Rust 🦀

GenesisOS

curiosity got me here

WindowsInternals

Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book

bluepill

tock

A secure embedded operating system for microcontrollers

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure

thread_namecalling

Process Injection using Thread Name

GPUSleep

Move CS beacon to GPU memory when sleeping

memchr

Optimized string search routines for Rust.

jiff

A date-time library for Rust that encourages you to jump into the pit of success.

bagbak

Yet another frida based iOS dumpdecrypted. Also decrypts app extensions