fengjixuchui Goto Github PK

sylantstrike

Simple EDR implementation to demonstrate bypass

symbol-parser

Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of functions

symbolic-execution

History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)

symbolic-execution-1

Files for http://deniable.org/reversing/symbolic-execution

symboliclink-testing-tools

symbolizer

A fast execution trace symbolizer for Windows.

symcc

SymCC: efficient compiler-based symbolic execution

symcrypt

Cryptographic library

symdiff

Diff tool for comparing symbols in PDB files

symexe

symexe

symlinkcallback

symlinkprotect

File system minifilter driver for Windows to block symbolic link attacks.

symqemu

SymQEMU: Compilation-based symbolic execution for binaries

symrez

When dlsym isn't enough

syms2elf

A plugin for Hex-Ray's IDA Pro and radare2 to export the symbols recognized to the ELF symbol table

symstore

The history of Windows Internals via symbols.

syn_flood

SYN_Flood

syncjobs_mpsystem

synctrayzor

Windows tray utility / filesystem watcher / launcher for Syncthing

synergy-core

Open source core of Synergy, the keyboard and mouse sharing tool

syringe

iDevice Exploit Injector

sys

Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code

sysark

Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，对于其它版本的系统或者BSOD的问题，需要的人DIY一下。目前实现的功能： 进程/线程/模块、 驱动模块、 SSDT、 Shadow SSDT、 注册表——解析hive文件、 文件、 启动项、 服务

syscall

Get & call syscall(x64 only)

syscall-benchmark

macOS syscall performance benchmark

syscall-detect

PoC capable of detecting manual syscalls from usermode.

syscall-direct

syscall-monitor

Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+

syscall-monitor-1

大表哥的Syscall-Monitor

syscall-rootkit

Just a proof of concept Linux rootkit that reads from syscalls.