Pinned Loading

1. radiance radiance Public

   Proof of concept: processor-affinity–based hooks for x86-64 on Windows.

   C++ 4

2. hookpe hookpe Public

   Proof of Concept demonstrating a stealthy code loading technique (Process Doppelgänging / Phantom File variations) using Transactional NTFS (TxF) and kernel function hooking.

   C++ 7 1

3. entunnel entunnel Public

   Modern C++20 library for establishing TCP tunnels through HTTP proxies on Windows using WinHTTP and transparent SSPI authentication (NTLM/Kerberos).

   C++ 1

4. gomik gomik Public

   Windows process memory mirroring through the signed vulnerable Panda driver PSMEMDriver (BYOVD): read/write via mapped physical pages, no OpenProcess/ReadProcessMemory.

   C++ 2

5. amdtools64 amdtools64 Public

   AmdTool64.sys BYOVD proof of concept

   C++ 3

6. etsl etsl Public

   Embedded TCP Socket Library

   C++