Windows PE memory dumper and rebuilder for loaded and manually mapped EXEs and DLLs

pyc2py is a Python bytecode decompiler that recovers .py source from .pyc files, one file or a whole folder at a time. It's built on native bytecode to AST recovery and version aware opcode tables.

People kept telling me my code looked bad. So I wrote a tool to make it worse (on purpose)

A python windows privilege escalation tool using winlogon.exe token duplication

A test project that checks whether ntdll APIs were hooked to mess with Prefetch logging

Automates the download of digital forensic tools and does bypass checks on Windows