I am Marcos Bajo h3xduck

Systems/Software security researcher

PhD Student at CISPA Helmholtz Center for Information Security

Open Source Stuff I've made

TripleCross

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

CFOP

The Coroutine Frame-Oriented Programming exploitation technique.

Umbra

A LKM rootkit targeting 4.x and 5.x kernel versions which opens a backdoor that can spawn a reverse shell to a remote host, launch malware and more.

RawTCPLib

A C library for creating and using TCP/IP packets with raw network sockets.

TaintBlade

A protocol reverse engineering framework with a custom Intel PIN multi-color tainting engine.

Greta

Android application for writing and saving encrypted notes.