SKVLLZ.

Deadwing. SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.

MilkBox. Tool to dump EFI runtime drivers.

ResilienceKit. Another UEFI runtime bootkit

Calamity. Example of using Windows Platform Binary Table (WPBT)

PicoHook. Small driver that uses alternative syscalls feature

ResearchPapers. Collection of my papers from conferences and meetups.

winrev. Some reverse-engineered things from windows internals

MiniMemoryDumper. A small program written in C + WinAPI that allows you to dump processes via PID.

poc. Collection of my PoC's for various vulnerabilities.

TheSleeper. Custom analog of Sleep function from WinAPI.

Avast-Reverse-Engineering. Pseudocodes of various Avast antivirus files are collected here. (DLL, SYS)! Abandoned collaboration with @colby57

smm. alternative smm driver for ryzen motherboards

recycle-bin-themes. Silly icons for the Windows Recycle Bin

KernelBeep. HalMakeBeep

xsh3llsh0ck.