eversinc33

Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.

Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.

Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.

MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.

XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.

Using the Counter Strike 1.6 RCON protocol as a C2 Channel.

Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).

Red Teaming / Pentesting challenges for my Advent-Of-Code 2021.

Tool for playing with Windows Access Token manipulation.

My adventures in learning about different userland malware techniques, such as syscalls, injection, unhooking or sandbox evasion.

Programmatically start WebClient from an unprivileged session to enable that juicy privesc.

Vibe Malware Triage - MCP server for static PE analysis.

LLVM based devirtualizer for the binaryshield software protector.

IDA plugin for automatic deobfuscation of opaque predicates by lifting microcode to z3 for SMT reasoning.

Enumerate domain machine accounts and perform pre2k password spraying.

Generate password spraying lists based on the pwdLastSet-attribute of users.

WinDbg plugin to trace module transitions from a debugged driver.

A .NET assembly tracer using Harmony for runtime method interception.

NoSQL Injection Tool to bypass login forms & extract usernames/passwords using regular expressions.

[100% AI Generated Code] Lightweight LLVM Symbolic Execution Engine

A C++ library for security researchers that uses symbolic execution on LLVM bitcode to analyze obfuscated VMP-protected software, it tells you what a register holds after a handler runs, or builds a formula if inputs are unknown.

Red-Teaming TempleOS.

CVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)

Python3 tool to perform password spraying using RDP

Deepsearch leak database client, as an alternative for pwndb

Pink BRC4 skin/theme.

Repository for slide decks of public talks I've given.

Deobfuscation of XorStringsNet

Misc Windows Driver/Kernel PoCs that do not need a separate repo.

Docker container escape enumeration tool.

Recursively extract urls from a web page for reconnaissance.

Ghidra .gdt files for parts of the Kernel Mode Driver Framework (KMDF) part of WDF.

Web based fake Windows Login Screen Phishing.

Nim library for interacting with Monero wallets & nodes via RPC.

Database of Black Metal lyrics and additional metadata in .JSON-format for computer assisted text analysis projects.

Voxel Game-Engine using OpenGL, created as a project to practice C++ and graphics programming.

Playstation (PSX) Emulator (WIP).

WIP raw socket packet manipulation library

WIP: Directory fuzzer for single page apps that require a browser to render content, with an interface similar to ffuf

Generates quick one liner reverse shell payloads for lazy people.

Monero: the secure, private, untraceable cryptocurrency

Another coercion method, using MS-EVEN ElfrOpenBELW.

No description.

Docker toolbox for pentest of web based application.

C# implementation of TokenFinder. Steal M365 access tokens from Office Desktop apps

Coerce Windows machines auth via MS-EVEN

Nim Library for Offensive Security Development

Your automated network enumeration watchtower.

mod to myaut2exe decompiler

No description.

Auto-Dash-Bot for Hyper Light Drifter.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Privilege Escalation Enumeration Script for Windows

Post-exploitation modules I wrote for educational purposes.

This repository of PowerShell sample scripts show how to access Intune service resources. They demonstrate this by making HTTPS RESTful API requests to the Microsoft Graph API from PowerShell.

Framework for Kerberos relaying

A tool to perform Kerberos pre-auth bruteforcing

PSX homebrew development stuff.

The FLARE team's open-source tool to identify capabilities in executable files.

No description.

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

No description.

Common library used by SharpHound.

C# Data Collector for BloodHound

ignore

No description.

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

PowerSploit - A PowerShell Post-Exploitation Framework

No description.

Fish-like autosuggestions for zsh

Adversary Emulation Framework

Dockerfile and ressources for Dnscat2

GraphQL automated security testing toolkit

List of packages for Nimble

This project intends to provide a series of tools to craft, parse, send, analyze and crack a set of LoRaWAN packets in order to audit or pentest the security of a LoraWAN infrastructure.

No description.

A Purposefully Vulnerable Blockchain

Some writeups for the 2019 European Cyber Week qualification CTF.