Julian Peña

GhostKatz. Dump LSASS via physical memory read primitives in vulnerable kernel drivers

NdisHook. Hijacking the Windows network stack from the kernel :)

GoodBaiii. Killing any process from low integrity via the BdApiUtil driver from Baidu AV

ShadowLdr. A basic, yet configurable shellcode loader that evades common AV/EDR products.

exploit-dev. Collection of exploits written by me for the sake of learning