daem0nc0re

TangledWinExec. PoCs and tools for investigation of Windows process execution techniques

PrivFu. Kernel mode WinDbg extension and PoCs for token privilege investigation.

VectorKernel. PoCs for Kernelmode rootkit techniques research.

AtomicSyscall. Tools and PoCs for Windows syscall investigation.

SharpWnfSuite. C# Utilities for Windows Notification Facility

Abusing_Weak_ACL_on_Certificate_Templates. Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

macOS_ARM64_Shellcode. ARM64 macOS assembly program for null-byte free shellcode

HEVD-CSharpKernelPwn. CSharp Writeups for HackSys Extreme Vulnerable Driver

hacktricks. Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Certify. Active Directory certificate abuse.

PSFileParse. PowerShell module to get file format information as PowerShell objects