rad9800

TamperingSyscalls. C++

BootExecuteEDR. C

misc. miscellaneous scripts and programs

hwbp4mw. C++

WTSRM. WTSRM

byor. Go

WTSRM2. C++

PMD. C++

FileRenameJunctionsEDRDisable. C++

VehApiResolve. C++

talks.

BloatedHammer. API Hammering with C++20

RansomFS. C++

DriverJack. Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths

Zeus. NOT MY CODE! Zeus trojan horse - leaked in 2011, I am not the author. This repository is for study purposes only, do not message me about your lame hacking attempts.

shellcode-template. A cmkr based win32 shellcode template for a unified build platform and more production friendly structure/testing.

detection-rules. Python