Projects

TinyC2

Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.

KMDLLInjector

How does EDRs inject their hooking DLL into a user mode process? KMDLLInjector was the answer for this quetion