ccccccking Goto Github PK

black-angel-rootkit

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

blackbone

Windows memory hacking library

carbon-black-cloud-sdk-python

VMware Carbon Black Cloud Python SDK

ccccccking1

1

cq-source-crowdstrike

A crowdstrike source plugin for CloudQuery Falcon that loads data from crowdstrike to any database, data warehouse or data lake supported by CloudQuery

edrhunt

Scan installed EDRs and AVs on Windows

fsminfilterhooking

habitize-crowdstrike

Habitat + Agents play

hack_scripts

Usefull scripts

hiddendesktop

HVNC for Cobalt Strike

hooksigntool

hvci-loldrivers-check

hyperbone

Minimalistic VT-x hypervisor with hooks

kasperskyhook_newksdriver

Started from https://github.com/iPower/KasperskyHook i updated sig and kaspersky driver

kernelforge

A library to develop kernel level Windows payloads for post HVCI era

libwsk

The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).

loldrivers

Living Off The Land Drivers

openedr

Open EDR public repository

physmem_drivers

A collection of various vulnerable (mostly physical memory exposing) drivers.

simple-key-logger

A simple keylogger for Linux systems

titanhide

Hiding kernel-driver for x86/x64.

windows-driver-samples

This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

winpmem

The multi-platform memory acquisition tool.

xigmapper

xigmapper (xeroxz is gay mapper) is a driver manual mapper that loads your driver before Vanguard, but after critical system infrastructure has been set up, allowing you to write your bypass without worrying about the intricacies of EFI or the boot process.