Lists (1)
Stars
Windows Defender Killer | Registry-Based Disablement + BYOVD Process Termination (C++)
BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).
Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
AV/EDR Lab environment setup references to help in Malware development
An advanced tool for working with access tokens and Windows security policy.
This repo contains PoCs for vulnerable Windows drivers.
Sample Rust crate used to implement a VBS enclave in Rust
An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer
A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack
Dynamic Function Resolution (DFR) definitions for Crystal Palace
Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.
sigreturn-oriented(SROP) based sleep obfuscation poc for Linux
PoC Implementation of a fully dynamic call stack spoofer
Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption
Beacon Object File (BOF) that utilizes the Early Bird Cryo Injection technique in order to perform shellcode injection through frozen job objects.
The Definitive Guide To Process Cloning on Windows
Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
random code snippets, useful for getting started
Collection of various malicious functionality to aid in malware development
NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. I have created this repository to make the access for study as easy as possible.
This map lists the essential techniques to bypass anti-virus and EDR
A collection of various awesome lists for hackers, pentesters and security researchers