Anas

Chaos-Rootkit. Now You See Me, Now You Don't

Terminator. Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

Blackout. kill anti-malware protected processes ( BYOVD )

Amsi-Killer. Lifetime AMSI bypass

APT38-0day-Stealer. APT38 Tactic PoC for Stealing 0days from security researchers

C2-Hunter. Extract C2 Traffic

CVE-2025-26125. ( 0day ) Local Privilege Escalation in IObit Malware Fighter

Bypass-Sandbox-Evasion. Bypass Malware Sandbox Evasion Ram check

Tokenizer. Kernel Mode Driver for Elevating Process Privileges

Shellcode-Injector. simple shellcode injector

URootkit. simple user-mode Rootkit

SleepKiller. Bypass Malware Time Delays

Overlord. abusing Process Hacker driver to terminate other processes (BYOVD)

Hooks_Hunter. Simple API Hooks detector

Dll-Injector. simple C++ dll injector

DeadLight. Simple C# malware that steals Discord token from .ldb files and from memory

CVE-2025-68921. Local Privilege Escalation Affecting Millions of Gaming Laptops

TrampHook. Simple x86 Trampoline Hook

Among-Us-External. external hack for Among Us (PATCHED)

KlTroll. Trolling Keyloggers by Forcing them to log Specific Text then freezing them

CVE-2026-0827. CVE-2026-0827 PoC

KasperskyHook. Hook system calls on Windows by using Kaspersky's hypervisor

AC-External. Simple Assault cube external hack written in C

GRage. A simple and funny x86 malware that trolls GTA players by killing their character every time it respawns

HackTheBox-CubeMadness. External hack for the Hack The Box CubeMadness1 challenge

Havoc. The Havoc Framework.

Chained-Together-External. External Fly Hack For Chained Together

windowskernelprogrammingbook. The Windows Kernel Programming book samples

PoC. Proofs-of-concept

CVEAC-2020. EasyAntiCheat Integrity check bypass by mimicking memory changes

github-backdoor-scanner. Scan GitHub repositories for potentially infected MSBuild project files