panda bear

ExecutiveCallbackObjects. Research on Windows Kernel Executive Callback Objects

WinAltSyscallHandler. Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999

winsmsd. Windows (ShadowMove) Socket Duplication

bonomen. BONOMEN - Hunt for Malware Critical Process Impersonation

RElieve. scripts, snippets etc.

exthost. A POC for Windows Extension Host hooking

Pin-ApiTracer. Updated version of ApiTracer Pin tool

dijuno. POC for a race condition exploit using directory junctions in Windows

awesome-hacking. A curated list of awesome Hacking tutorials, tools and resources

bnetwbreaker. BinaryNinja plugin for ETW events parsing

Milou. Milou - an useless toy driver

ctf. capture the flag scripts, writeups

lua-viral. A VirusTotal client written in Lua

codeql-uboot. CodeQL

Code-coverage-analysis-tools. Code coverage analysis tools for the PIN Toolkit

PurpleLlama. Set of tools to assess and improve LLM security.

herocrab. Rust

container-explorer. Go