irohaneabc Goto Github PK

adr

ADR is a trojan that retrieves all information on the computer and all data stored in applications using chormuim. It recovers cookies, tokens, passwords and saved bank cards. This malware is undetectable by Windows Defender, Chrome, Virustotal (4/71).

antiantivirusnotes

学习免杀的笔记

awesome-vmp

虚拟化保护（VMP壳）分析相关资料

awesome-windows-kernel-security-development

windows kernel security development

base64shellloader

分离ShellCode加载

basic-video-call

Sample app to join/leave a channel, mute/unmute, enable/disable the video, and switch between front/rear cameras.

bysh

Shell to bypass cmd usage restrictions on Windows.

chapter

dingtalk-rce

exploitdb

The official Exploit Database repository

forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

heat-rat

🔭Program for remote control of Windows computers. Huge functionality. It has full and lite versions.

homework-of-c-language

C/C++ code examples of my blog.

ldrlockliberator

For when DLLMain is the only way

pick_yello

python-data-structure-cn

problem-solving-with-algorithms-and-data-structure-using-python 中文版

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

runpe-in-memory

Run a Exe File (PE Module) in memory (like an Application Loader)

serialportshell

A simple program to interact with Serial Port in terminal,only for Windows

shellcodebuildandloadexe

这是一个shellcode简单的示例demo，使目标exe程序转换为shellcode可执行程序的一个demo【并不打算后期维护】，两年前写的，我发现被工作磨平了对技术的探索，今天翻到发现的。

v8-action

a simple method to get v8 source code with github action

windows-apt-warfare

著作《Windows APT Warfare：惡意程式前線戰術指南》各章節技術實作之原始碼內容