Maxime dcb

DreamWalkers. Lab research on Windows loader internals, PE loading, stack artifacts, and execution tradeoffs.

C2TeamServer. TeamServer and Client of Exploration Command and Control Framework

C2Implant. Windows C++ Implant for Exploration C2

C2Core. Core C++ library for C2 architecture, message handling, and security tooling experiments.

C2LinuxImplant. Linux C++ Implant for Exploration C2

donut. Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

PeInjectorSyscall. Create a Shellcode Injector, using indirect syscal, from any Windows Module

PeDropper. Create a Shellcode Dropper from any Windows Module

EarlyCascade. Create a Shellcode Dropper from any Windows Module , using EarlyCascade injection technique and indirect syscall

maxDcb.github.io. SCSS

nimAesCrypt. Nim file-encryption module that uses AES256-CBC to encrypt/decrypt files.

PowershellWebDelivery. Generate a Powershell oneliner to deliver a Shellcode generated from any Windows Module without touching the disk

OpenShiftGrapher. OpenShift Pentesting Tool for enumerating and graphing clusters in Neo4j

libSocks5. Socker5 Server with a twist

libDnsCommunication. Simple Client & Server for Dns Communication

libSocketHandler. C++

libPipeHandler. Simple Client & Server for SMB, named Pipe Communication

C2ImplantPy. Linux Python Implant for Exploration C2

COFFPacker. Generate arguments for the COFFLoader code in C++

OpenShiftGrapherNew. OpenShift pentesting tool for enumerating and graphing clusters in Neo4j

ElfDropper. Create a Shellcode Dropper from an ELF File

C2ImplantNim. Linux Nim Implant for Exploration C2

MemoryModule. Library to load a DLL from memory.

COFFLoader. C

PIC_Bindshell. Position Independent Windows Shellcode Written in C

Detours. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.