Pinned Loading

1. WizardVM WizardVM Public

   WizardVM is a windows 10 malware analysis environment defined through infrastructure as code using Hashicorp Packer.

   PowerShell

2. Windows-Shellcode-Injection-Methods Windows-Shellcode-Injection-Methods Public

   A repository documententing various shellcode execution methods for Windows, in C.

   C

3. XDump XDump Public

   Configuration extraction tool for XWorm RAT Client. Tested on XWorm 3.1.

   C# 1 1

4. WizardCalls WizardCalls Public

   A tool for generating indirect syscalls for use in C based Windows implants

   C 3

5. NtQuerySystemInformation-Userland-Hooking NtQuerySystemInformation-Userland-Hooking Public

   A project showing how processes can be hidden on Windows by hooking NtQuerySystemInformation from userland

   C

6. Hashycalls Hashycalls Public

   A tool for generating win32 API hashing code for IAT obfuscation

   C