bestforever Goto Github PK

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alcatraz

x64 binary obfuscator

awesome-windows-kernel-security-development

windows kernel security development

blackbone

Windows memory hacking library

bochspwn

A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

ddimon

Monitoring and controlling kernel API calls with stealth hook using EPT

hooklib

The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

kvm-guest-drivers-windows

Windows paravirtualized

nginx

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

sdk

BinaryAI Python SDK

self-remapping-code

This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemory.

shark

Turn off PatchGuard in real time for win7 (7600) ~ win10 (17763).

shellcodecompiler

Shellcode Compiler

shellcodeframework

绕3环的shellcode免杀框架

simpleremoter

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。项目代码仅限于学习和交流用途。

spicall

Yet another windows syscall library

threadspy

unicorn_pe

Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

vmprotect

VMProtect Leaked Source Code

winddk

The Microsoft® Windows Server™ 2003 Service Pack 1 (SP1) Driver Development Kit (DDK) provides a driver development environment for Windows Server 2003, Windows® XP, and Windows 2000. The DDK provides additional driver-specific headers, libraries, sources, tools, and documentation that are used to develop drivers for Windows Server 2003 SP1.

wrk

The Windows Research Kernel v1.2 contains the sources for the core of the Windows (NTOS) kernel and a build environment for a kernel that will run on x86 (Windows Server 2003 Service Pack 1) and AMD64 (Windows XP x64 Professional)

xorstr

heavily vectorized c++17 compile time string encryption.