ethobis Goto Github PK

infinityhook

Hook system calls, context switches, page faults and more.

injectallthethings

Seven different DLL injection techniques in one single project.

inline-hook

simple inline-hook framework works for x86, x64, arm and thumb

kernelexploit

윈도우 커널 익스플로잇 (공격 프로그램)

kernelexploitdriver

윈도우 커널 익스플로잇 (드라이버)

kernelexplorer

logoncredentialssteal

LOCAL AND REMOTE HOOK msv1_0!SpAcceptCredentials from LSASS.exe and DUMP DOMAIN/LOGIN/PASSWORD IN CLEARTEXT to text file.

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mfd

파일시스템 미니필터 드라이버 (교육용 코드)

mfd-tools

mfd-tools

mfdext

파일시스템 미니필터 드라이버 디버거-익스텐션

nginx-admins-handbook

How to improve NGINX performance, security, and other important things; @ssllabs A+ 100%, @mozilla A+ 120/100.

pcmonitor

pcmonitor - windows kernel driver to monitor users activity(such as keyboard input, screenshot) and send encrypted reports to mobile applications in realtime through intermediate web server

pesignanalyzer

This program can retrieve signature information from PE files which signed by a/some certificate(s) on Windows. Supporting multi-signed infomation and certificates chain.

powershell-suite

My musings with PowerShell

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

proguard

A fork of ProGuard.

pysc2-examples

StarCraft II - pysc2 Deep Reinforcement Learning Examples

pythonforwindows

A codebase aimed to make interaction with Windows and native execution easier

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

simplevisor

SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

uac

uacme

Defeating Windows User Account Control

usodllloader

Windows - Weaponizing privileged file writes with the Update Session Orchestrator service

virtualkd

volatility

An advanced memory forensics framework