microsoft-warbird

Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard

Reimplementation of Microsoft's Warbird obuscator

Research on obfuscated licensing APIs / CLIP service in the Windows kernel

Integration of Microsoft Warbird with the MSVC compiler

Documentation of Microsoft's Warbird obfuscation