Simple CRT DLL injection implemented in assembly using FASM

Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

Tunnel TCP connections through a file

DeadPotato is a windows privilege escalation utility from the Potato family of exploits, leveraging the SeImpersonate right to obtain SYSTEM privileges. This script has been customized from the ori…

Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR hooks in Windows.

Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination IP addresses are parsed based on the server name in TLS Cli…

Dump lsass using only Native APIs by hand-crafting Minidump files (without MinidumpWriteDump!)

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

Implementing the ghostly hollowing PE injection technique using tampered syscalls.

Writing Nimless Nim - Slides and source for BSIDESKC 2024 talk.

Cobaltstrike UDRL with memory evasion

AV bypass while you sip your Chai!

Various one-off pentesting projects written in Nim. Updates happen on a whim.

atm printer device manager simple code

atm pin pad(Encryptor) device manager simple code

atm card reader device manager simple code

Just base64 written in pure assembler for Windows.

DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable

Nim Payload Generation

Remote Shellcode Injector

ScareCrow - Payload creation framework designed around EDR bypass.

Ask a TGS on behalf of another user without password

My implementation of the GIUDA project in C++

BlackLotus UEFI Windows Bootkit

Utilizing the DirectX and DShowNET assemblies to record video from the host's webcam

Native Syscalls Shellcode Injector

IoT-devices GGreg20_V3 Ionizing Radiation Detector module under Home Assistant server with ESPHome plugin setup example

Space Rover using Esp32