YangHaoi's starred repositories
DriverJack
Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths
PatchlessCLRLoader
.NET assembly loader with patchless AMSI and ETW bypass
PythonForWindows
A codebase aimed to make interaction with Windows and native execution easier
ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
OffensiveCSharp
Collection of Offensive C# Tooling
ThreatCheck
Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
deoptimizer
Evasion by machine code de-optimization.
rust-shellcode
windows-rs shellcode loaders
inline_syscall
Inline syscalls made easy for windows on clang
Pestilence
Shellcode loader designed for evasion. Coded in Rust.
riscy-business
RISC-V Virtual Machine
Awesome-AV-EDR-XDR-Bypass
Awesome AV/EDR/XDR Bypass Tips
CursedChrome
Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.
node-win32-api
win32 api