jilvan1234 Goto Github PK

etw-providers-docs

Document ETW providers

etw-resources

Event Tracing For Windows (ETW) Resources

etw-syscall

https://key08.com/index.php/2021/10/19/1375.html

etw_watcher

Using GitHub Actions to create commit diffs

etwexplorer

View ETW Provider manifest

etwrealtime

Example of real-time Windows ETW packet capture session

etwti-syscall-hook

A simple program to hook the current process to identify the manual syscall executions on windows

event-tracing-for-windows

Library for ETW, ProcessTracker sample based on ETW

evil-mhyprot-cli

A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

evilsln

A New Exploitation Technique for Visual Studio Projects

exe_to_dll

Converts a EXE into DLL

executivecallbackobjects

Research on Windows Kernel Executive Callback Objects

exploit-doc

After many requests, our team created a new Silent DOC Exploit for Microsoft Office. The purpose of this exploit is to silently infect victims upon opening the document. Furthermore, this exploit will convert an .EXE to .DOC or .XLS without any detection’s from antivirus. In addition, we guarantee the exploit is FUD for the entirety of your subs…

extract-authenticode

Extract Authenticode signature data from PE format file

ez-etw

Convenient framework for using Event Tracing for Windows

fakembr

TDL4 style rootkit to spoof read/write requests to master boot record

fakeprocexplorer

Fake Process Explorerer by SysInternals.

falconeye

fhex

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

fixvmpdump

use python script to fix vmp dump api in ida

flare-ida

IDA Pro utilities from FLARE team

flare-vm

flirtdb

A community driven collection of IDA FLIRT signature files

forcedelete

Windows driver including couple different techniques for file removal when regular operation isn't possible.

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

fromalaxinfo

fuckcertverifytimevalidity

This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually

funchook

Hook function calls by inserting jump instructions at runtime

game-hacking

Tutorials, tools, and more as related to reverse engineering video games.