Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

C++-based shellcode builder

The World's First Universal Mod Loader for Unity Games compatible with both Il2Cpp and Mono

Store SSH keys in the Secure Enclave

Themes for Bootstrap

PoC EFI runtime driver for memory r/w & kdmapper fork

Documenting system information classes and their uses

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+Bloc…

Hook function calls by replacing PLT(Procedure Linkage Table) entries.

FPS透视和自动瞄准作弊的实现(使用imgui)，仅供学习参考

RunasCs - Csharp and open version of windows builtin runas.exe

Create, view and edit terminal colorschemes.

PAM plugin module that allows the Apple Watch to be used for authentication

PowerShell rebuilt in C# for Red Teaming purposes

DWARF Explorer - a GUI utility for navigating the DWARF debug information

get_module, read/write mem, mouse emulation

Dump native and .NET assemblies

IoCreateDriver Implementation, it can be handful if you're trying to bypass anticheats

XORList: Efficient C++ Linked List (No-throw by default)

🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥

🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability.

Pretty git status

A library to assist writing memory-unsafe code in "pure" python, without any imports (i.e. no ctypes etc.)

Discord Messenger is a free Discord-compatible messaging client targeting both new and old Windows.

KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys

A unique C# dll injector capable of injecting .Net Core and .Net Framework managed DLL's into both managed or unmanaged processes by automatically bootstrapping the .Net CLR. Great for hooking, ana…

Adds a module initializer to an assembly.

Console program and nuget package to inject a module initializer method into a built .NET assembly

Open source implementations of Microsoft compression algorithms

Native code virtualizer for x64 binaries