Lloyd Davies

elf-strings will programmatically read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.

LloydLabs

A way to delete a locked file, or current running executable, on disk.

LloydLabs

This is a simple example and explanation of obfuscating API resolution via hashing

LloydLabs

wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")

LloydLabs

A novel technique to communicate between threads using the standard ETHREAD structure

LloydLabs

Rini is a tiny, non-libc dependant, .ini file parser programmed from scratch in C99.

LloydLabs

LloydLabs

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.

LloydLabs

Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak

LloydLabs