Martin Fischer

r77-rootkit. Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

pe-union. Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI

self-morphing-csharp-binary. Executable that mutates its own code

living-off-the-land. Fileless attack with persistence

slui-file-handler-hijack-privilege-escalation. Slui File Handler Hijack UAC Bypass Local Privilege Escalation

bytecode-api. Framework for C# development

fastpix3d. Software Rasterizer (C++)

castenstein. Raycaster (C++)

performance-monitor-privilege-escalation. Performance Monitor Volatile Environment LPE

taskmgr-privilege-escalation. TaskMgr Volatile Environment LPE

sysprep-privilege-escalation. Sysprep Volatile Environment LPE (2017)

remote-assistance-privilege-escalation. Remote Assistance Volatile Environment LPE

enter-product-key-privilege-escalation. Enter Product Key Volatile Environment LPE

component-services-privilege-escalation. Component Services Volatile Environment LPE

display-languages-privilege-escalation. Display Languages Volatile Environment LPE

bytecode77.

literay. Raytracer (C# & C++)