Yxel

DeathSleep. A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

llvm-yx-callobfuscator. LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

rust_syscalls. Single stub direct and indirect syscalling with runtime SSN resolving for windows.

c_syscalls. Single stub direct and indirect syscalling with runtime SSN resolving for windows.

GstreamerChromeBridge. NodeJs app that allows streaming from gstreamer to html5 on chrome.

FindItByCalls. Hacky code for extracting calls in DLLs by function

llvm-pass-plugin-skeleton. This is a detailed step-by-step description on how to compile out-of-tree a dynamically linked LLVM pass plugin for the new pass manager in Windows x86_64, tested with llvm 16.x

PingMe. PMP aims to be an opensource learning resource, that helps new people to see how protocols operates inside a controlled and secure environment.