0xsp security research and development

a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab

Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techniques, implant signatures, reflectively loaded .NET assemblies. it works with a multi-layer confidence model that dramatically reduce the false positive rate and hunt for malicious behaviour.

ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.

comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reduction (ASR) rules without Admin privileges

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

Pascal Offsec repo for malware dev and red teaming 🚩