nnum Goto Github PK

admmutate

Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I hope nobody uses signatures for anything (virus / malware scanners included).

advobfuscator

Obfuscation library based on C++11/14 and metaprogramming

ark-tools

Windows Ark 工具的工程和一些demo

arkprotect

An Ark tool project，run on Win7 x86/x64

atom-bombing

Brand New Code Injection for Windows

carpvm

A small stack-based virtual machine.

cerberus

win32下的虚拟机保护壳

chromium-sandbox

clrs

CLRS in C++

computer-virus

计算机病毒以及相应的专杀工具的研发

cpp_primer_answers

《C++ Primer》第五版中文版习题答案

cve-2023-28229

decryptonite

Ransomware Detection and Mitigation Software

dllexport

[AHK] Dll Export Viewer

dotgdb

GDB scripts to add support for low level debugging and reverse engineering

dumpvtable

Generates a Python script to give public interface names in an ActiveX file to an IDB file.

eleven

Elevation by environment variable expansion

exploits

My Exploits

exploits-1

Miscellaneous exploit code

iat-hooking-revisited

Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.

ida

injection

Windows process injection methods

libpe

PE file parser

linuxtq

《Linux提权方法论》

longene

The Longene(Linux Unified Kernel) Project

longene_doc

the longene tech-docs for translation, to-be used in wiki: http://www.longene.org/mediawiki/index.php/%E9%A6%96%E9%A1%B5

makin

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

malware

malware source codes

malware-1

malwarecookbook

Malware Analyst's Cookbook stuffs