This is your work, valued

@Moon

Andrea

Expert
@andreisss

Into cyber. Blue, red, offense. Break, defend, learn—every day. No fluff. Real-world sec.

KslDump. KslDump — Why bring your own knife when Defender already left one in the kitchen?

398

Ghosting-AMSI. Ghosting-AMSI

246

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution. Remote DLL Injection with Timer-based Shellcode Execution

216

Living-off-the-COM-Type-Coercion-Abuse. This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit type coercion

54

Sideloading-.

10

FIRP. FIRP - First Incident Response Powershell

10

NTLMv2-Hash-Leak-via-COM-Auto-Execution. NTLMv2 Hash Leak via COM + Auto-Execution

9

Evading_Matrix. C++

4

SDMalware. Python

3

EarlyBird-Custom-Injection. Native APIs and AES encryption for shellcode

2

capa-ta. Capa-ta leverages the Capa tool and VT API to detect capabilities in executable files

2

GPU-Backed-Shellcode-Execution-PoC. GPU-Backed Shellcode Execution PoC

2