Collection of various malicious functionality to aid in malware development

Obfuscate specific windows apis with different apis

WinDBG Anti-RootKit Extension

APK/DEX detector for Windows, Linux and MacOS.

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

A Binary Genetic Traits Lexer Framework

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

APT38 Tactic PoC for Stealing 0days from security professionals

Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine

Remote Shellcode Injector

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

Windows handle hijacker

Execute shellcode files with rundll32

Bypass Malware Sandbox Evasion Ram check

A dynamic unpacking tool

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

Bypass Malware Time Delays

user-mode Rootkit

Full source of the Conti Ransomware Including the missing Locker files from the original leak. I have fixed some of the errors intentionally introduced by the leaker to prevent the locker from being built. The Queue header file which implements a few linked list data structures that Conti uses for task scheduling in the Threadpool had several mi…