allenboyliu Goto Github PK

ac

kernel mode anti cheat

apexldr

ApexLdr is a DLL Payload Loader written in C

aufs

aufs - simple Linux kernel file system for os course

cpp-httplib-mbedtls

Use cpp-httplib with mbedtls

direct3d-win32-book-src-code

《Windows游戏编程之从零开始》配套源代码 |《Dream Journey: Windows Game Programming From Scratch》 book source code

dosvisor

x86 Real-Mode MS-DOS Emulator using Windows Hypervisor Platform

dse_hook

load unsigned kernel-driver by patching dse in 248 lines

dxgkrnl_hook

C++ graphics kernel subsystem hook

edrprison

Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry

emulatespyppmessagecapturer

Monitor and Hook WH_CALLWNDPROC, WH_CALLWNDPROCRET, WH_GETMESSAGE

executeassembly

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avoiding EDR hooks via NT static syscalls (x64) and hiding imports by dynamically resolving APIs (hash).

frida-jit-unpacker

The Frida-Jit-unPacker aims at helping researchers and analysts understand the behavior of packed malicious .NET samples.

ghostwriting

GhostWriting Injection Technique.

gtk4-study

gtk4-study

harmonyos-tutorial

HarmonyOS Tutorial. 《跟老卫学HarmonyOS开发》

hello-gtk

学习 GTK

infinityhook_latest

etw hook (syscall/infinity hook) compatible with the latest Windows version of PG

inject

injectlib

基于Ruby编写的命令行注入版本

ioctl-parser

An app for parsing and identifying IO control code values

ios

Here you can find write ups for iOS Vulnerabilities that have been released.

learn-kvm

Qemu KVM(Kernel Virtual Machine)学习笔记

libevent

<Libevent深入浅出>本书要求有一定的服务并发编程基础，了解select和epoll等多路I/O复用机制。

macho-ld

In-memory loading and executing Mach-O files

mandibule

linux elf injector for x86 x86_64 arm arm64

memory-horse

关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新

myfs

操作系统课大作业 - 自制文件系统（ramfs改良……）

onmousemove-htmlfile-poc

PoC for onMouseMove HTML file used in the Russian APT Group campaign targeting Ukraine

processdoppelganging

Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.

programming-book-2

Programming Book 2 ：C++、Go、JavaScript、Node.js