Pinned Loading

1. WatchDogKiller WatchDogKiller Public

   PoC exploit for the vulnerable WatchDog Anti-Malware driver (amsdk.sys) – weaponized to kill protected EDR/AV processes via BYOVD.

   C++ 154 15

2. MiniEDR MiniEDR Public

   MiniEDR is a kernel-mode process monitor that logs creations & terminations via a named pipe. Built for research & learning, exploring Windows internals & EDR mechanisms!

   C 17 2

3. rootkit rootkit Public

   A minimal Windows kernel-mode rootkit capable of terminating EDR processes from ring 0. Built for research, stealth, and power. 🔥

   C++ 15 4

4. jcat jcat Public

   A silent C++ reverse shell that extracts IP and port from its name, connects to a listener, and provides remote command-line access.

   C++ 2 2

5. dotNetEnum dotNetEnum Public

   DotNetEnum is a C++ tool designed to enumerate installed .NET Framework versions on a Windows system.

   C++ 1 1