zhuhuibeishadiao Goto Github PK

sneakcalls

direct systemcalls with a modern c++20 interface.

snippets

Various code snippets and small PoCs, to be used for tests or as ready-made skeletons.

soso-music

electron music app

soui

a new direct ui framework

speakeasy

Windows kernel and user mode emulation.

spiremove

进程内优雅地拦截SPI/LSP模块。 Manage SPI/LSP in a graceful way within private process.

stackvmcpp

A stack and register based virtual machine which can compile and run arbitrary code in runtime

steam_overlay_loader

Steam overlay loader extension (for CreamAPI).

steamtools

🛠「Steam++」是一个包含多种Steam工具功能的工具箱。

stlkrn

C++ STL in the Windows Kernel with C++ Exception Support

stringsifter

A machine learning tool that automatically ranks strings based on their relevance for malware analysis.

sunstrider

Analyze PatchGuard

sushi

a Japanese food keeps you sane

svf

Static Value-Flow Analysis for C and C++ Programs

svmnest

a frame of amd-v svm nest

swh-injector

An Injector that can inject dll into game process protected by anti cheat using SetWindowsHookEx.

symcrypt

Cryptographic library

symlinkcallback

A driver that hooks C: volume using symbolic link callback to track all FS access to the volume

syscall-monitor

Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+

syscallhook

System call hook for Windows 10 20H1

syscalltable

syscalltables

Windows NT x64 Syscall tables

syscalltest

PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls

sysexec

[Windows] Local Privilege Escalation - WebClient

sysmon_reverse

sysmontools

Utilities for Sysmon

sysmonx

SysmonX - An Augmented Drop-In Replacement of Sysmon

system-monitor

syswhispers

AV/EDR evasion via direct system calls.

syswhispers2

AV/EDR evasion via direct system calls.