Yxel

A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementing page protection changes during no execution.

janoglezcampos

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

janoglezcampos

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

janoglezcampos

LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

janoglezcampos