scp-66 Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

c4

C in four functions

cpp-design-patterns

C++设计模式

dllmainhijacking

Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode

elfloader

load so file into current memory space and run function

fastpbkdf2

Fast PBKDF2 implementation in C

gh0st

a open source remote administrator tool

heavens-gate

Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.

hmac

Software implementation in C of the FIPS 198 Keyed-Hash Message Authentication Code HMAC for SHA2 (namely HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, and HMAC-SHA-512).

htran

lcx.exe cross-platform version

improvedreflectivedllinjection

An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security

ip2region

Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is ONLY a few megabytes with all IP address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm

kdu

Kernel Driver Utility

ldrlockliberator

For when DLLMain is the only way

libhv

🔥 比libevent/libuv/asio更易用的网络库。A c/c++ network library for developing TCP/UDP/SSL/HTTP/WebSocket/MQTT client/server.

malware-1

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code.

memorymodule

Library to load a DLL from memory.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

obfusheader.h

Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

pe_to_shellcode

Converts PE into a shellcode

rat-njrat-0.7d-modded-source-code

NJR

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

upx-visual-studio

Compile UPX 3.96 and belong librarys on Visual Studio! Source also include LZMA, UCL and zlib :black_nib:

vmprotect-3.5.1

vtcp6.0

Reliable UDP, Author Whg

vtcp6.0-linux

Reliable udp, modified by xuyun.

wdextract

Extract Windows Defender database from vdm files and unpack it

windows-eventlog-bypass

Use subProcessTag Value From TEB to identify Event Log Threads

wprotect