Lloyd Davies (@LloydLabs)
github

LloydLabs

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    1,816
  • Global Rank 17,003 (Top 0.6 %)
  • Followers 355
  • Following 8
  • Registered about 8 years ago
  • Most used languages
    C
         72.7 %
    Go
         18.2 %
    Lua
         9.1 %

Top repositories

1

delete-self-poc

A way to delete a locked file, or current running executable, on disk.
C
483
star
2

wsb-detect

wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")
C
349
star
3

ntqueueapcthreadex-ntdll-gadget-injection

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
C
229
star
4

Windows-API-Hashing

This is a simple example and explanation of obfuscating API resolution via hashing
C
223
star
5

shellcode-plain-sight

Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak
C
165
star
6

elf-strings

elf-strings will programmatically read an ELF binary's string sections within a given binary. This is meant to be much like the strings UNIX utility, however is purpose built for ELF binaries.
Go
139
star
7

dearg-thread-ipc-stealth

A novel technique to communicate between threads using the standard ETHREAD structure
C
109
star
8

process-enumeration-stealth

C
74
star
9

librini

Rini is a tiny, non-libc dependant, .ini file parser programmed from scratch in C99.
C
29
star
10

go-malwarebazaar

MalwareBazaar public API bindings for Go
Go
8
star
11

sgrm-research

Repository to compliment my blog post on System Guard Runtime Monitor
Lua
5
star
12

pafish-macos

A macOS pafish-like port to detect analysis/virtual environments
1
star