marcosd4h Goto Github PK

lazy_importer

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

leakedhandlesfinder

Leaked Windows processes handles identification tool

libprotobuf-mutator_fuzzing_learning

Learn how to combine libprotobuf-mutator with libfuzzer & AFL++

liquidsnake

LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript

logicalanalyzer

Logical Analyzer is a C# library for determining if Rules apply to provided Objects

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lsobj

Lists all visible objects in the Windows kernel object namespace, a command-line WinObj

malmemdetect

Detect strange memory regions and DLLs

malseclogon

A little tool to play with the Seclogon service

malware

Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from: http://www.malwaretech.com

malware-and-exploitdev-resources

manticore

Symbolic execution tool

mapdetection

Detect manualmapped images remotely, without hassle

mbox

Windows tool box library

mdm

Windows MDM Research Utilities

mdmatador

MDM-based Agentless C2 System

memhunter

Live hunting of code injection techniques

memory_signature

A small wrapper class providing an unified interface to search for various memory signatures

mesos

Binary coverage tool without binary modification for Windows

miniz

miniz: Single C source file zlib-replacement library, originally from code.google.com/p/miniz

mmfcodeinjection

Code Injection via Memory Mapped Files

mmloader

Library for loading dll module bypassing windows PE loader from memory (x86/x64)

moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

mongoose

Mongoose Embedded Web Server Library - Mongoose is more than an embedded webserver. It is a multi-protocol embedded networking library with functions including TCP, HTTP client and server, WebSocket client and server, MQTT client and broker and much more.

nanodump

Dump LSASS like you mean it

nativeleakdetector

Win32 memory leak detector with ETW

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

node-native-boilerplate

A very small, understandable node native extension with reasonable project structure

ntcall64

Windows NT x64 syscall fuzzer

ntlib

Headers for linking your software with ntdll.dll