Halil Dalabasmaz

Elite
@hlldz
artofpwn.com

Phant0m. Windows Event Log Killer

1.8k

SpookFlare. Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

942

RefleXXion. RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

499

dazzleUP. A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.

491

CVE-2021-1675-LPE. Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527

325

pickl3. Windows active user credential phishing tool

285

APC-PPID. Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.

158

wildPwn. Brute forcer and shell deployer for WildFly

98

misc. miscellaneous codes

38

pengyhash. Fast 64-bit non-cryptographic hash algorithm

11

hlldz.github.io. Halil Dalabasmaz's Personal Blog | hlldz

3
11
Apply