hugmyndakassi Goto Github PK

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

manalyze

A static analyzer for PE executables.

mbedtls

An open source, portable, easy to use, readable and flexible SSL library

megadumper

Dump native and .NET assemblies

memject

Simple Dll injector loading from memory. Supports PE header and entry point erasure. Written in C99.

memloader

Memory Loader Open Source Project by Sentinel-Labs.

memory-allocators

Custom memory allocators in C++ to improve the performance of dynamic memory allocation

minidump

Python library to parse and read Microsoft minidump file format

minisdk

MiniSDK

mint

Contains the definitions for the Windows Internal UserMode API from ntdll.dll, samlib.dll and winsta.dll.

miscellaneous

Small programs and scripts that do not require their own repositories

mmfcodeinjection

Code Injection via Memory Mapped Files

mmloader

A library for loading dll module bypassing windows PE loader from memory (x86/x64)

mrspicky

MrsPicky - An IDAPython decompiler script that helps auditing calls to the memcpy() and memmove() functions.

mythril

A hypervisor written in rust

napoca

Lightweight type-1 hypervisor offering a foundation for building advanced security-focused functionality.

nina

NINA: No Injection, No Allocation x64 Process Injection Technique

noamci

Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().

noscreen

Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

nsis-reversing-suite

NSIS Reversing Suite with IDA Plugins

nsisextractor

Extract the original ransomware binary from an NSIS installer

nt-modules

Collect different versions of Crucial modules.

nt_wrapper

A wrapper library around native windows sytem APIs

ntdll

ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h

ntlua

Lua in kernel-mode because why not.

ntvdmx64

Run Microsoft Windows NTVDM (DOS) on 64bit Editions

obfvious

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

osslsigncode

OpenSSL based Authenticode signing for PE/MSI/Java CAB files