WinSysManipulator
Windows system manipulation tooling focused on red team tradecraft and evasion.
C++EDR EvasionRed Team
View Project →SW64
Loading core modules...
About.
I am an offensive security researcher specializing in exploit development, malware research, and custom tooling for red team operations.
My work spans low-level Windows internals (process injection, EDR evasion, shellcode development, and binary analysis) through web application testing and automated reconnaissance pipelines. I build primarily in C++, Rust, Python, and Go, with a focus on production-ready tools for real engagements.
I develop end-to-end offensive capabilities across initial access, C2 infrastructure, evasion, post-exploitation, and attack surface automation.
Current Focus:
- Exploit development and 0-day vulnerability research
- Malware development: evasion, polymorphic techniques, and process injection
- Custom C2 tooling and implant development in Rust
- Recon automation and attack surface mapping
Projects.
Active Projects
AV-EDR-checker
Host inspection utility for checking AV/EDR footprints via native Win32 interfaces.
PythonWin32APIRed Team
View Project →BinaryEntropyManipulation
Binary entropy tampering research for evasive executable modification workflows.
C++BinaryEvasion
View Project →Sandbox-Detection
Runtime sandbox and analysis-environment detection routines for payload safety checks.
CRed TeamEvasion
View Project →Defender-Removal
PowerShell project exploring Defender bypass logic in controlled red team labs.
PowerShellEDR BypassRed Team
View Project →ReconPipe
Automated API key leak hunter. Single-command pipeline from subdomain discovery through secret scanning and live key validation.
PythonReconOSINTAutomation
View Project →Zig-Code
Collection of Zig projects including API hooking via trampolines and link obfuscation for offensive tooling research.
ZigWindows APIRed TeamLinux
View Project →C2 Plugins
OverlordPlugins
Custom Overlord C2 plugins in one repository. OPSEC Linter is live, with Delivery Manager and additional wrappers on the way.
OverlordC2Red TeamPlugins
View Repository →In Development
DomainWho
Domain intelligence and WHOIS enumeration tool for passive recon and target profiling workflows.
PythonOSINTReconWHOIS
Status: Private for now
Skills.
Languages
Core Languages
➜ Python
Automation, tooling, and rapid exploit scripting. Primary language for most security workflows.
➜ GO
High-performance C2 implants, network tools, and concurrent backend services.
➜ C++
Low-level exploit development, shellcode, and performance-critical security research.
➜ C#
Windows post-exploitation tooling, BOFs, and .NET-based offensive capabilities.
➜ Rust
Memory-safe systems tooling for custom C2 implant development and network utilities.
Additional Languages
➜ Powershell, Bash, Lua, Batch
Learning in Progress
➜ Assembly (ASM)
Deepening low-level execution knowledge for exploit dev, shellcode writing, and RE.
➜ Zig
Systems-level alternative to C for writing lean, portable offensive tooling.
Favorite Tools
➜ Overlord C2 and Cobalt Strike
Primary C2 platforms for red team ops: beacon staging, lateral movement, and payload delivery.
➜ Acunetix
Automated web scanning for initial surface coverage before manual testing.
➜ nuclei
Custom template development for targeted vuln detection across large attack surfaces.
➜ Ghidra
Static analysis and RE for binary targets, malware samples, and custom shellcode review.
➜ Empire
PowerShell-based post-exploitation for Windows environments and AD attacks.
➜ Wireshark
Traffic analysis for protocol-level debugging, C2 detection evasion testing, and pcap review.
➜ Burp Suite
Manual web app testing with custom extensions, active scanning, and request manipulation.
Expertise Areas
➜ Exploit Development
Creating custom exploits and shellcode, including 0-day vulnerability research, evasion techniques, and process injection primitives.
➜ Offensive Security Techniques
Penetration testing, privilege escalation, EDR/AV bypass, and post-exploitation across web, network, and binary targets.
➜ Reconnaissance & Asset Discovery
Subdomain enumeration, API fuzzing, secret scanning, and cloud surface mapping using custom automation pipelines.
➜ Reverse Engineering
Binary analysis, memory inspection, and behavioral analysis for vulnerability research and malware understanding.
Blog.
19 Oct 2026
Inside the Cybercrime Supply Chain: What Underground Listings Reveal—and What They Don’t
A role map of the underground market, from tooling to cash-out, using advertised prices and claimed incomes from observed listings.
Cybercrime ResearchUnderground EconomyThreat Intelligence
Read Article →23 Sept 2026
Your Cash in Monero
Monero is built so digital cash stays private by default, with low fees, practical payments, and a network that does not depend on a central operator.
MoneroCryptocurrencyPrivacy
Read Article →Contact.
Get in touch
Interested in collaborating on cybersecurity projects or need expertise in penetration testing and network security? Feel free to reach out.
[Send Message]Might take a few days to get back to you.