Pinned Repositories
BetterXencrypt
A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.
DCMB
Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!
HalosUnhooker
Halos Gate-based NTAPI Unhooker
KPDB
Windows PDB parser for kernel-mode environment.
MeterPwrShell
Automated Tool That Generates The Perfect Meterpreter Powershell Payload
SharpHalos
My implementation of Halo's Gate technique in C#
SharpLoadLibrary
An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
SharpUnhooker
C# Based Universal API Unhooker
SyscallShuffler
Your NTDLL vaccine from modern direct syscall methods.
TripleS
Extracting Syscall Stub, Modernized
GetRektBoy724's Repositories
GetRektBoy724/SharpUnhooker
C# Based Universal API Unhooker
GetRektBoy724/DCMB
Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!
GetRektBoy724/MeterPwrShell
Automated Tool That Generates The Perfect Meterpreter Powershell Payload
GetRektBoy724/BetterXencrypt
A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.
GetRektBoy724/KPDB
Windows PDB parser for kernel-mode environment.
GetRektBoy724/TripleS
Extracting Syscall Stub, Modernized
GetRektBoy724/SharpHalos
My implementation of Halo's Gate technique in C#
GetRektBoy724/SharpLoadLibrary
An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
GetRektBoy724/HalosUnhooker
Halos Gate-based NTAPI Unhooker
GetRektBoy724/SyscallShuffler
Your NTDLL vaccine from modern direct syscall methods.
GetRektBoy724/JALSI
JALSI - Just Another Lame Shellcode Injector
GetRektBoy724/ReversePowernoid
Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)
GetRektBoy724/Breaking-Detecting-Direct-Syscall-Techniques
A repository filled with ideas to break/detect direct syscall techniques
GetRektBoy724/SysGate
One gate to all syscalls!
GetRektBoy724/NiceTryDLL
Nice try reading NTDLL from disk, nerd.
GetRektBoy724/LocalAMSI.Fail
This is a port of AMSI.fail,i modify the code to make it C# 5 compatible and can be executed on Windows 10 without installing any extra requirements.AMSI.fail itself generates obfuscated PowerShell snippets that break or disable AMSI for the current process.
GetRektBoy724/sementara
Some random shits for random things
GetRektBoy724/GetRektBoy724
GetRektBoy724/ZeroThreadKernel
Recursive and arbitrary code execution at kernel-level without a system thread creation
GetRektBoy724/QWERTY
Web project (testing)
GetRektBoy724/ANGRYORCHARD
A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
GetRektBoy724/EasyAntiPatchGuard
Easy Anti PatchGuard
GetRektBoy724/NVDrv
Abusing nvidia driver (nvaudio.sys) for physical/virtual memory and control register manipulation.
GetRektBoy724/pwn3d_align
Hooking Shadow and normal SSDT with Kaspersky Hypervisor and abusing alignment
GetRektBoy724/superfetch
Translate virtual addresses to physical addresses from usermode.