5 skills found
rmdavy / AmsiPEBWalkVBAWalking the PEB in VBA
sub1to / CtninjaCompile-time string encryption and import obfuscation for Windows PE32(+) binaries
ricardojoserf / GetProcAddressGetProcAddress implementation in C# walking the PEB using only NtReadVirtualMemory
ricardojoserf / GetModuleHandleGetModuleHandle implementation in C# using only NtQueryInformationProcess by walking the PEB
batuhan-arda / Direct Syscall APC Injection PoC MalwareInjects shellcode into cmd.exe to execute arbitrary code. Creates a suspended process, allocates memory using direct syscalls, writes disguised payload, changes permissions to executable, then triggers execution via APC. Bypasses EDR/AV through syscall-level operations, PEB walking, SQL obfuscation, and junk code. NOT INTENDED FOR MALICIOUS USE.
