ethobis Goto Github PK

adbi

Android Dynamic Binary Instrumentation Toolkit

and64inlinehook

Lightweight ARMv8-A(ARM64, AArch64, Little-Endian) Inline Hook Library for Android C/C++

androidinjection

This project contains several exercises about injection using ptrace on Android platform

awesome-windbg-extensions

awesome windbg extensions

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

awesome-windows-kernel-security-development

awesome-windows-security

List of Awesome Windows Security Resources

blackbone

Windows memory hacking library

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

cobaltstrike4.0

收集的CobaltStrike4.0

codeexecutiononwindows

A list of ways to execute code on Windows using legitimate Windows tools

com-code-helper

Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code

cve-2020-0668

Use CVE-2020-0668 to perform an arbitrary privileged file move operation.

cve-2021-28476

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

cve-2022-21882

def

Incomplete windows defender PoC

delve

Delve is a debugger for the Go programming language.

demos

Windows Kernel Exploitation. Static & dynamic analysis, exploits & vuln reasearch. Mitigations bypass's, genric bug-class's.

drvhide-poc

Hidden kernel mode code execution for bypassing modern anti-rootkits.

ebpf-for-windows

eBPF implementation that runs on top of Windows

edrs

elf-arm-hook-library

It's very similiar to Substrate. But I give you three methods to do HOOK.

elfhook

modify PLT to hook api, supported android 5\6.

embedresponsively

Embed Responsively helps web content producers transform fixed width embedded content into fluid responsive embeds.

ethobis.github.io

ethobis blog

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

hookdemo

a demo for android native hook

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

improvedreflectivedllinjection

An improvement of the original reflective DLL injection technique by Stephen Fewer of Harmony Security