reloc2 Goto Github PK

3vilgu4rd

This is a daemon process which make a programe runing all time.

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

apt_report

Interesting APT Report Collection And Some Special IOC

atlasldr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

avkiller

利用图形化识别技术快速关闭目标机器上的杀毒软件

awesome-chatgpt-prompts-zh

ChatGPT 中文调教指南。怎么让它听你的话。

botnet-zoo

整理每个流行botnet家族的专杀脚本、靶机环境、检测规则、病毒样本、病毒原理图

byob

An open-source post-exploitation framework for students, researchers and developers.

bypasscredguard

Credential Guard Bypass Via Patching Wdigest Memory

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

caudit

集权设施扫描器

cdncheck

A utility to detect various technology for a given IP address.

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

chromekatz-dev

Dump cookies directly from Chrome process memory

cobalt-strike-beacon-dev

not a reverse-engineered version of the Cobalt Strike Beacon

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

conti_locker

Conti Locker source code

crawlergo

A powerful browser crawler for web vulnerability scanners

de4dot

.NET deobfuscator and unpacker.

dll-merger

Merging DLLs with a PE32 EXE without LoadLibrary

edrsandblast

evasion-escaper

Evasion Escaper is a project aimed at evading the checks that malicious software performs to detect if it's running in a virtual environment or sandbox, and to pass all such checks successfully.

exe_to_dll

Converts a EXE into DLL

exploit-db

exploit-db

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

folly

An open-source C++ library developed and used at Facebook.

go-exploit-dev

A Go-based Exploit Framework

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

janus

Janus is a pre-build event that performs string obfuscation during compile time. This project is based off the CIA's Marble Framework