Ekko

Ekko A small sleep obfuscation technique that uses CreateTimerQueueTimer Win32 API. Proof of Concept. Can be done better. NOTE This implementation has known flawes. So I wouldn't recommend using it without knowing how it works or know how to spot and fix those flaws. TLDR: don't copy and past it...

TickTock

TickTock This repository demonstrates a PoC memory scanner for enumerating timer-queue timers as used in Ekko Sleep Obfuscation: https://github.com/Cracked5pider/Ekko. For a full technical walkthrough please see the accompanying blog post here:...

D1rkSleep

D1rkSleep Improved version of EKKO by @5pider that Encrypts only Image Sections. Sleep obfuscation technique that uses CreateTimerQueueTimer Win32 API. Credits: https://github.com/Cracked5pider/Ekko...

Havoc - Modern and malleable post-exploitation command and control framework

Havoc is a modern and malleablepost-exploitation command and control framework, created by @C5pider. Havoc is in an early state of release. Breaking changes may be made to APIs/core structures as the framework matures. Support Consider supporting C5pider on Patreon/Github Sponsors. Additional...