Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.
This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom tools, C2 servers, backdoors, exploitation techniques, stagers, bootloaders, and other malicious artifacts that mirror those used in real world attacks.
BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native ETW evasion. For Cobalt Strike & Adaptix.
Windows 内核任意内存读写漏洞收集仓库,收录简单、稳定、可编译复现的 Exploit(权限提升 / 终止安全软件)
Process Impairment Exploit Chain.