WinSysManipulator
Windows system manipulation tooling focused on red team tradecraft and evasion.
C++EDR EvasionRed Team
View Project →SW64
Loading core modules...
About.
I am an offensive security researcher specializing in exploit development, malware research, and custom tooling for red team operations.
My work spans low-level Windows internals (process injection, EDR evasion, shellcode development, and binary analysis) through web application testing and automated reconnaissance pipelines. I build primarily in C++, Rust, Python, and Go, with a focus on production-ready tools for real engagements.
I develop end-to-end offensive capabilities across initial access, C2 infrastructure, evasion, post-exploitation, and attack surface automation.
Current Focus:
- Exploit development and 0-day vulnerability research
- Malware development: evasion, polymorphic techniques, and process injection
- Custom C2 tooling and implant development in Rust
- Recon automation and attack surface mapping
Projects.
Active Projects
AV-EDR-checker
Host inspection utility for checking AV/EDR footprints via native Win32 interfaces.
PythonWin32APIRed Team
View Project →BinaryEntropyManipulation
Binary entropy tampering research for evasive executable modification workflows.
C++BinaryEvasion
View Project →Sandbox-Detection
Runtime sandbox and analysis-environment detection routines for payload safety checks.
CRed TeamEvasion
View Project →Defender-Removal
PowerShell project exploring Defender bypass logic in controlled red team labs.
PowerShellEDR BypassRed Team
View Project →ReconPipe
Automated API key leak hunter. Single-command pipeline from subdomain discovery through secret scanning and live key validation.
PythonReconOSINTAutomation
View Project →Zig-Code
Collection of Zig projects including API hooking via trampolines and link obfuscation for offensive tooling research.
ZigWindows APIRed TeamLinux
View Project →Overlord C2 Plugins
Delivery Manager
Overlord server plugin for static site deployment via Vercel, Netlify, and Cloudflare Drop, with lure import, agent staging, and visitor tracking.
Node.jsOverlordRed Team
View Platform →DFMI Wrapper
Overlord plugin wrapping DFMI for MSI-based payload delivery, including stub, inject, and rogue-mst modules.
PythonOverlordMSIRed Team
View Platform →EvilFontTool Wrapper
Overlord plugin for EvilFontTool font-based document deception, generating HTML, DOCX, and PDF lures from the C2 console.
PythonOverlordSocial Engineering
View Platform →OPSEC Linter
Overlord build plugin that scans compiled agent binaries for OPSEC issues across PE, ELF, and Mach-O before deployment.
Node.jsOverlordOPSEC
View Platform →Host Intel Snapshot
Agent-side native plugin that runs a full host recon sweep on connect and ships structured results back to Overlord.
C++OverlordReconNative
View Platform →In Development
DomainWho
Domain intelligence and WHOIS enumeration tool for passive recon and target profiling workflows.
PythonOSINTReconWHOIS
Status: Private for now
Skills.
Languages
Core Languages
➜ Python
Automation, tooling, and rapid exploit scripting. Primary language for most security workflows.
➜ GO
High-performance C2 implants, network tools, and concurrent backend services.
➜ C++
Low-level exploit development, shellcode, and performance-critical security research.
➜ C#
Windows post-exploitation tooling, BOFs, and .NET-based offensive capabilities.
➜ Rust
Memory-safe systems tooling for custom C2 implant development and network utilities.
Additional Languages
➜ Powershell, Bash, Lua, Batch
Learning in Progress
➜ Assembly (ASM)
Deepening low-level execution knowledge for exploit dev, shellcode writing, and RE.
➜ Zig
Systems-level alternative to C for writing lean, portable offensive tooling.
Favorite Tools
➜ Overlord C2 and Cobalt Strike
Primary C2 platforms for red team ops: beacon staging, lateral movement, and payload delivery.
➜ Acunetix
Automated web scanning for initial surface coverage before manual testing.
➜ nuclei
Custom template development for targeted vuln detection across large attack surfaces.
➜ Ghidra
Static analysis and RE for binary targets, malware samples, and custom shellcode review.
➜ Empire
PowerShell-based post-exploitation for Windows environments and AD attacks.
➜ Wireshark
Traffic analysis for protocol-level debugging, C2 detection evasion testing, and pcap review.
➜ Burp Suite
Manual web app testing with custom extensions, active scanning, and request manipulation.
Expertise Areas
➜ Exploit Development
Creating custom exploits and shellcode, including 0-day vulnerability research, evasion techniques, and process injection primitives.
➜ Offensive Security Techniques
Penetration testing, privilege escalation, EDR/AV bypass, and post-exploitation across web, network, and binary targets.
➜ Reconnaissance & Asset Discovery
Subdomain enumeration, API fuzzing, secret scanning, and cloud surface mapping using custom automation pipelines.
➜ Reverse Engineering
Binary analysis, memory inspection, and behavioral analysis for vulnerability research and malware understanding.
Blog.
Technical articles coming soon.
I'm currently preparing content and will publish technical writeups soon.
Contact.
Get in touch
Interested in collaborating on cybersecurity projects or need expertise in penetration testing and network security? Feel free to reach out.
[Send Message]