Popular repositories Loading

1. ImmoralFiber ImmoralFiber Public

   Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) PhantomThread (An evolved callstack-masking implementation)

   C++ 206 30

2. ELFieScanner ELFieScanner Public

   A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by threat actors & those which have been incorporated into ope…

   C++ 78 11

3. weetabix weetabix Public

   A C++ PoC implementation for enumerating Windows Fibers directly from memory

   C++ 17 4

4. ThreadStackSpoofer ThreadStackSpoofer Public

   Forked from mgeeky/ThreadStackSpoofer

   Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

   C++ 1

5. ShellcodeFluctuation ShellcodeFluctuation Public

   Forked from mgeeky/ShellcodeFluctuation

   An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting its contents

   C++