Kernel Mode Drivers

Creating a Windows kernel mode driver to hide and kill processes.

Windows Kernel Debugging

Modifying Kernel data structures to hide processes and elevate privileges.

AppDomainManager Injection

Executing arbitrary code inside a .NET process.

Android Remote Access

Creating an APK to gain remote access to an Android 14 device.

DLL Proxying

Using DLL’s as a persistence mechanism.

LLVM Obfuscation

Setting up Obfuscator LLVM with Visual Studio 2022.

Encoding Shellcode as IP Addresses

Converting shellcode to look like a series of IP addresses.

Function Name Hashing

Replacing existing ROR13 function hash names in shellcode to evade signature based detection.

Module Stomping

Executing Shellcode from the address space of known good DLL’s.

Callback Shellcode Execution

Executing Shellcode using function callbacks.

Inline Function Hooking

Creating a C++ DLL to modify a target applications behaviour.

Disguising Client Side Payloads

Ways of making payloads a little less suspicious.