A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

HVNC for Cobalt Strike

A memory-based evasion technique which makes shellcode invisible from process start to end.

Log what files are accessed by any Linux process

Transmit LoRa Frames Without a Radio

PS3 Homebrew ENabler [Supports 4.80 - 4.82 OFW / 4.83 - 4.90 HFW]

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

PoC for CVE-2023-4911

not a reverse-engineered version of the Cobalt Strike Beacon

WMI virus, because funny

BOF to steal browser cookies & credentials

EDRSandblast-GodFault

针对（CVE-2023-0179）漏洞利用 该漏洞被分配为CVE-2023-0179，影响了从5.5到6.2-rc3的所有Linux版本，该漏洞在6.1.6上被测试。 漏洞的细节和文章可以在os-security上找到。

Exploit targeting NT kernel in 24H2 Windows Insider Preview

Proof-of-Concept for CVE-2024-21345

Mitrastar MIPS router analysis and exploitation

Kernel-level stealth rootkit without fancy exploits