In-memory sleeping technique using threads created in suspended state and timers that work with the ResumeThread function after context is set for execution. Each workers has its own stack and no need to modify the list of valid indirect call targets in C

By: ／u／oldboy21

HardwareBreakPoint + Ekko ROP modified to hold stack arguments + Kernel Objects Enumeration for some honest hiding in memory.

By: ／u／oldboy21

Find DLLs with RWX sections

By: ／u／oldboy21

Whether you knew Process Mockingjay since ever or you just got to know it, this was "Monday Freedom to" code some C# that finds RWX sections laying around

Yet, another packer/loader with my very own implementation of GetProcAddress and GetModuleHandle to dinamically fetch function addresses, as well as AES payload and function name encryption with a derived SHA256 key

By: ／u／oldboy21

Find Writable Shares with Python.

By: ／u／oldboy21

FreshRSS

In-memory sleeping technique using threads created in suspended state and timers that work with the ResumeThread function after context is set for execution. Each workers has its own stack and no need to modify the list of valid indirect call targets in C

HardwareBreakPoint + Ekko ROP modified to hold stack arguments + Kernel Objects Enumeration for some honest hiding in memory.

Find DLLs with RWX sections

Yet, another packer/loader with my very own implementation of GetProcAddress and GetModuleHandle to dinamically fetch function addresses, as well as AES payload and function name encryption with a derived SHA256 key

Find Writable Shares with Python.