Stars
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.
a tool used to analyze and monitor in named pipes
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals…
🐱💻 Disables the Driver Signature Enforcement using g_CiOptions patch
PoCs for Kernelmode rootkit techniques research.
The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
A file protection application to safeguard unsolicited access against malicious actors, for Windows that uses a custom minifilter driver!!
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
Nidhogg is an all-in-one simple to use windows kernel rootkit.
This repository contains complete resources and coding practices for malware development using Rust 🦀.
Auditing for TLS certificates (Go code)
A tool to capture communication between Chromium processes on Windows
Red Teaming Tactics and Techniques
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A complete layer to get compatibility on XP/2003 for newer applications