Skip to content
@Ryftenius

RYFTENIUS

The Cultivated | Malware Analysis & Detection, Offensive & Defensive Tooling & Frameworks

RYFTENIUS regional breach globe

RYFTENIUS

Website · Capability · Vulnerability Research · Insights · Contact


What happens when you give specialized researchers & engineers too much time and a motive?

They stop asking whether it can be detected and start proving it, from both ends.

Ryftenius is a specialized R&D collective working on Windows security from userland to the kernel, building offensive and defensive systems before the problem has a name.

We use the best tools available, and where they fall short, we engineer our own, from full detection platforms to the offensive tooling built to defeat them.

Alongside that, we do vulnerability research across reverse-engineering tools, endpoint security, and the Windows kernel, coordinated with the vendors who ship them.

Pinned Loading

  1. RESX RESX Public

    Specialized Windows Reverse Engineering & Binary Analysis Toolkit | API Deobfuscation, Call Graphs, Kernel Driver & IOCTL Analysis

    Rust 9

  2. SKUGGA SKUGGA Public

    DBI Sensor built for Process Hooking & Instrumentation. Supports custom IPC channels, Earlybird Injection & more

    C++ 5 1

  3. Vesuki Vesuki Public

    Defensive Rust control-flow obfuscation and anti-analysis tooling for x86_64 binaries

    Rust 8

  4. StayCloser StayCloser Public

    A process memory protector & encryptor for long-running Linux processes (& Containers)

    C 2

  5. MVMRelay MVMRelay Public

    A Remote Administration Secure Command Relay for executing commands at different Integrity Level's (IL) on Windows VM's

    Rust 2 1

  6. Valv-String-Encryption Valv-String-Encryption Public

    High-entropy compile-time string encryption for Rust, backed by AEAD, ChaCha20 & handrolled mutation engines

    Rust 9

Repositories

Showing 10 of 11 repositories
  • RESX Public

    Specialized Windows Reverse Engineering & Binary Analysis Toolkit | API Deobfuscation, Call Graphs, Kernel Driver & IOCTL Analysis

    Ryftenius/RESX's past year of commit activity
    Rust 9 MIT 0 0 0 Updated Oct 27, 2026
  • SKUGGA Public

    DBI Sensor built for Process Hooking & Instrumentation. Supports custom IPC channels, Earlybird Injection & more

    Ryftenius/SKUGGA's past year of commit activity
    C++ 5 1 0 0 Updated Oct 26, 2026
  • .github Public

    RYFTENIUS organization profile

    Ryftenius/.github's past year of commit activity
    0 0 0 0 Updated Oct 23, 2026
  • Blackbird-Adversary-Emulation-Suite Public

    Collection of Programs used to test Blackbird's Detection Sensors BAS

    Ryftenius/Blackbird-Adversary-Emulation-Suite's past year of commit activity
    C++ 0 1 1 0 Updated Oct 1, 2026
  • Vigil Public

    Windows K-ETW detection engine for monitoring untrusted access to protected files, with SIEM output and pluggable SOAR notification pipelines

    Ryftenius/Vigil's past year of commit activity
    Rust 3 Apache-2.0 1 0 0 Updated Aug 15, 2026
  • Vesuki Public

    Defensive Rust control-flow obfuscation and anti-analysis tooling for x86_64 binaries

    Ryftenius/Vesuki's past year of commit activity
    Rust 8 0 0 0 Updated Aug 15, 2026
  • Valv-String-Encryption Public

    High-entropy compile-time string encryption for Rust, backed by AEAD, ChaCha20 & handrolled mutation engines

    Ryftenius/Valv-String-Encryption's past year of commit activity
    Rust 9 AGPL-3.0 0 0 0 Updated Aug 15, 2026
  • StayCloser Public

    A process memory protector & encryptor for long-running Linux processes (& Containers)

    Ryftenius/StayCloser's past year of commit activity
    C 2 MIT 0 0 0 Updated Aug 15, 2026
  • MVMRelay Public

    A Remote Administration Secure Command Relay for executing commands at different Integrity Level's (IL) on Windows VM's

    Ryftenius/MVMRelay's past year of commit activity
    Rust 2 MIT 1 0 0 Updated Aug 15, 2026
  • CCGT-Packer Public

    Post-build string encryption packing tool

    Ryftenius/CCGT-Packer's past year of commit activity
    C++ 7 AGPL-3.0 0 0 0 Updated Aug 15, 2026