realmadaha Goto Github PK

0x00sec_code

Code for my 0x00sec.org posts

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

android9_gnss_hal_driver

anycall

x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration

asafw

Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]

asiagaming

Browser, VMEscape and Kernel Exploitation

atom-bombing

Brand New Code Injection for Windows

atomic-red-team

Small and highly portable detection tests.

attck-pentester-book

ATTCK-PenTester-Book

aviator

Antivirus evasion project

avsignseek

Tool written in python3 to determine where the AV signature is located in a binary/payload

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

awesome-malware-analysis

A curated list of awesome malware analysis tools and resources

awesome-mitm

Curated List of MitM frameworks on GitHub

awesome-sec-talks

A collected list of awesome security talks

awesome-threat-detection

A curated list of awesome threat detection and hunting resources

awssecurity

for AWS Security material

babadook

Connection-less Powershell Persistent and Resilient Backdoor

botnets

This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY

bruteshark

Network Analysis Tool

casper-fs

Casper-fs is a Custom Hidden Linux Kernel Module generator. Each module works in the file system to protect and hide secret files.

cave_miner

Search for code cave in all binaries

chashell

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

chisel

A fast TCP/UDP tunnel over HTTP

cimsweep

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

conptyshell

ConPtyShell - Fully Interactive Reverse Shell for Windows 10 higher

cornerstone

JavaScript library to display interactive medical images including but not limited to DICOM

cpuz-dsefix

Exploiting CPU-Z Driver To Turn Load Unsigned Drivers

createremotethread

From 32-bit process to 64-bit process