cronos

PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.

functionstomping

Shellcode injection technique. Given as C++ header, standalone Rust program or library.

hotkey_exploitation

This repository contains the POC and the scanner to catch the Shortcut Hotkey Exploitation method.

idov31

idov31.github.io

jormungandr

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

mrkaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

nidhogg

Nidhogg is an all-in-one simple to use rootkit.

nidhoggcsharpapi

C# API for Nidhogg rootkit

nidhoggscript

NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg

offensiverust

Rust Weaponization for Red Team Engagements.

rustomware

Simple ransomware written in Rust. Part of the building a rustomware blog post.

sandman

Sandman is a NTP based backdoor for red team engagements in hardened networks.

talks-and-publications

Released presentations of my talks + code that used during these talks

udpinspector

Listing UDP connections with remote address without sniffing.

venom

Venom is a library that meant to perform evasive communication using stolen browser socket