try2crack Goto Github PK

analyzemft

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

bitvisor

A git clone of the official mercurial repository

bluespawn

An Active Defense and EDR software to empower Blue Teams

darwin-xnu

The Darwin Kernel (mirror)

ddimon

Monitoring and controlling kernel API calls with stealth hook using EPT

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

dnslib

Simple C++ library designed for encoding and decoding of DNS protocol packets

etw-providers-docs

Document ETW providers

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

ipc

IPC is a C++ library that provides inter-process communication using shared memory on Windows. A .NET wrapper is available which allows interaction with C++ as well.

kernel-bridge

Windows kernel hacking framework, driver template, hypervisor and API written on C++

krabsetw

KrabsETW provides a modern C++ wrapper and a .NET wrapper around the low-level ETW trace consumption functions.

ktl

Kernel Template Library: STL-style containers and tools for Windows kernel space programming

libcodecs

libcodecs is part of the "Huorong eXtendible Stream Scan Engine" project copyright by Huorong Borui (Beijing) Technology Co., Ltd.

libdt

libdt is part of the "Huorong eXtendible Stream Scan Engine" project copyright by Huorong Borui (Beijing) Technology Co., Ltd.

libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

messageanalyzer-archive

Microsoft Message Analyzer EOL Archive

ollvm_deobfuscation

OLLVM_Deobfuscation is a Python-based ollvm deobfuscation tool, which now has a perfect performance on ollvm confused C / C + + code compiled on x86 architecture based Linux platform.

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

openedr

Open EDR public repository

ossem_modular

OSSEM Modular

rbtree

rbtree implementation adapted from linux kernel thus can be used in your own c program(of course in userspace).

rewolf-wow64ext

Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.

sec-books-part1

:books: 网安类绝版图书

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

sysmonforlinux