A fancy in-place decryptor for the ClipSp.sys kernel driver included with Windows

Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.

Windows Explorer application written in assembly

My adventures in learning about different malware techniques, such as syscalls, code injection, unhooking or sandbox evasion.

Black Hat Asia 2023 PDF Public

PE obfuscator with Evasion in mind

A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.

A bunch of scripts and code i wrote.