RetDec is a retargetable machine-code decompiler based on LLVM.

A Simple Ransomware Vaccine

New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.

Windows Local Privilege Escalation from Service Account to System

RetDec plugin for IDA

Enumerating and removing kernel callbacks using signed vulnerable drivers

Various code snippets

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

Yet Another Memory Analyzer for malware detection

Example implementation of DNSAdmin DLL PrivEsc attack