Repositories list

• ExecutePeFromPngViaLNK

  Public
  Extract and execute a PE embedded within a PNG file using an LNK file.

  Python

  •

  MIT License

  •45•301•1•2•Updated Nov 2, 2024Nov 2, 2024

• EmbedPayloadInPng

  Public
  Embed a payload inside a PNG file

  C

  •

  MIT License

  •36•282•0•0•Updated Oct 24, 2024Oct 24, 2024

• DRMBinViaOrdinalImports

  Public
  Create Anti-Copy DRM Malware

  drmanti-reversinganti-analysis

  C

  •

  MIT License

  •12•50•0•0•Updated Aug 19, 2024Aug 19, 2024

• GhostlyHollowingViaTamperedSyscalls

  Public
  Implementing the ghostly hollowing PE injection technique using tampered syscalls.

  C

  •

  MIT License

  •26•129•1•0•Updated May 26, 2024May 26, 2024

• CodeSearchDemo

  Public
  C

  •

  MIT License

  •4•39•0•0•Updated Feb 20, 2024Feb 20, 2024

• RemoteTLSCallbackInjection

  Public
  Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process

  C

  •

  MIT License

  •37•243•1•0•Updated Jan 21, 2024Jan 21, 2024

• Christmas

  Public
  C

  •

  MIT License

  •36•249•1•0•Updated Jan 21, 2024Jan 21, 2024

• MaldevAcademyLdr.1

  Public
  C

  •

  MIT License

  •46•328•0•0•Updated Sep 22, 2023Sep 22, 2023

• EntropyReducer

  Public
  Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists

  C

  •

  Apache License 2.0

  •58•401•1•0•Updated Jun 1, 2023Jun 1, 2023

• HellHall

  Public
  Performing Indirect Clean Syscalls

  syscallsedrs

  C

  •67•500•1•1•Updated Apr 19, 2023Apr 19, 2023