Jackson T.

SysWhispers. AV/EDR evasion via direct system calls.

SysWhispers2. AV/EDR evasion via direct system calls.

TelemetrySourcerer. Enumerate and disable common sources of telemetry used by AV/EDR.

ioctlpus. C#

DIRT. Driver Initial Reconnaissance Tool

CVE-2019-9730. Synaptics Audio Driver LPE

av-fingerprints. Antivirus Emulator Fingerprints

markovTextStego.js. Text steganography library for JavaScript

crx-packer. CLI Chrome Extension (CRX) Packer written in Python

openxml. Port of Eric White's OpenXML SDK to Node.js

Antimalware-Research. Research on Anti-malware and other related security solutions

ltxml. Port of Eric White's ltxml library to Node.js

titanium-asset-extractor. "Decompile" Titanium-built iOS apps via Frida.

MasterTap. Clone and emulate PayPass-enabled MasterCard credit cards for contactless transactions

sublime-velma. Syntax Highlighting and Build System for VELMA (Vaguely Eleven-Like Machine Architecture)

Limelighter. Slightly modified Limelighter

Silfen. Windows syscall fuzzer that I used in 2017 & 2018. Not much to say about it but maybe helpful to someone. At least syscall information itself

i88fm-playlist. Integration of Indie 88.1 FM with Grooveshark

cypher.js. nodejs c++ addon to parse cypher query to AST

mimikatz. A little tool to play with Windows security

Cypherflow. TypeScript

RpcView. RpcView is a free tool to explore and decompile Microsoft RPC interfaces

sqlite-wrapper. A small wrapper on node-sqlite3 providing simple bindings to most commonly used SQLite functions in standard applications.