xxl-job内存马

execute PE in memory Filelessly

Origami Crypter with an updated version of the stub that bypasses windows defender.

Plaguards: Open Source PowerShell Deobfuscation and IOC Detection Engine for Blue Teams. [Presented at Black Hat Asia 2025 Arsenal]

Selling crypter / crypter services bypassing windows defender. Private stub for each purchase. 50 dollars.

Fetch a remote C# Assembly and execute it in memory using Assembly.Load

This case, centered on a PowerShell download cradle, illustrates one of the most common but under-analyzed threats in modern enterprise environments.

Awesome Fileless Malware

This repository, "Why-so-Serious-SAM," showcases a proof of concept for the HiveNightmare fileless exploit on Windows 11. 🐙 Dive into the details of fileless malware techniques and their implications for security. 🛡️