thefLink

thefLink's repositories

Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

Language:C421 110

Aims to identify sleeping beacons

Language:C389 5 2

A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC

Language:C323 8 1

Language:C187 60

ETW based POC to identify direct and indirect syscalls

Language:C++167 20

Small tool to play with IOCs caused by Imageload events

Language:C++35 10

Executes shellcode from a remote server and aims to evade in-memory scanners

Language:C++30 20

Ensures that a GUI application terminates after processing. Used for Fuzzing

Language:Python300

C# Script used for Red Team

Language:C#3 10

Solutions for mbe class

Language:Python010

Language:Assembly010