PE obfuscator with Evasion in mind

A fork of AFL for fuzzing Windows binaries

A little tool to play with Windows security

Windows NT x64 Syscall tables

Flipper Zero firmware source code

Defeating Windows User Account Control

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

.NET assembly loader with patchless AMSI and ETW bypass

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass…

Windows NT x64 syscall fuzzer

Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.