fengjixuchui Goto Github PK

hleaker

An usermode alternative for DuplicateHandle.

hobocopy

An open source backup tool for Windows

hollow

EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

hollowfind

Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and also reports any suspicious memory regions which should help in detecting any injected code.

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

home-grown-red-team

homeless-pasta-driver

Homelesses pasted driver that he has been selling to kids, mostly pasted from this: https://github.com/fir3z/Driver-GoByebye

homemade-decompiler

An x86_64 Linux decompiler written in Python!

homemade-machine-learning

🤖 Python examples of popular machine learning algorithms with interactive Jupyter demos and math being explained

homepwn

HomePwn - Swiss Army Knife for Pentesting of IoT Devices

homura_pwn_waf

基于patchkit和seccomp的自定义过滤syscall的pwn通防

honeybee

An experimental high performance, fuzzing oriented Intel Processor Trace capture and analysis suite

honeybrid

Honeybrid is a network application built to 1) administrate network of honeypots, and 2) transparently redirect live network sessions (TCP or UDP) from one primary destination host to a secondary destination host.

honeypotbuster

honggfuzz

Security oriented fuzzer with powerful analysis options. Supports evolutionary, feedback-driven fuzzing based on code coverage (software- and hardware-based)

hook

mac OSX and ios hook (mac和ios平台hook)

hook-exporttable

hook ntkrnl export,change the ntopenprocess address.

hook-integrity-checks

hook-scanner

Scans all modules in target process for jmp/int3 hooks dissassembles then and follows jmps to destination.

hook.lib

easy detour-, vftable-, iat- and eathooking

hookapi

API Hook sample

hookapi-1

hookbong

Detect hooks inside a loaded process.

hookcase

Tool for reverse engineering macOS/OS X

hookcollection

一些 oc 的 hook

hookdefend

iOS逆向之反HOOK的基本防护

hookdemo

android插件化案例,包含三大方面：1.aapt修改资源前缀，合并宿主和插件资源。2. Hook ClassLoader,合并宿主与插的dex文件。3. Hook 加载启动插件的Activity、Service、BroadcastReceiver、ContentProvider,以及Fragemnt。

hookdemo_xposed

基于xposed的hook框架，可以hook Java和 native，可以根据包名加载对应的hook.so

hookdetect

Detect simple function hooks via mhook

hookdetection_csharp

HookDetection