al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

blackbone

Windows memory hacking library

blacklotus

A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.

bootdoor

An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot

cheat-engine

Cheat Engine. A development environment focused on modding

chezscheme

Chez Scheme

d1rkldr

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

faceswap

Non official project based on original /r/Deepfakes thread. Many thanks to him!

heapcrypt

Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap

jx

jx

micro-lzmadec

Micro LZMA decoder

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

pep

Private exe protector

protectors

🛡️ Obfuscator, Encryption, Junkcode, Anti-Debug, PE protection/modification

shellcode

shellcode-2

x86 and x86-64 shellcodes for Windows, Mac OSX, Linux, BSD and Solaris

shellcode-loader

Open repository for learning dynamic shellcode loading (sample in many programming languages)

transitionalperiod

Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits

triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

univdisasm

x86 Disassembler and Analyzer

vmprotect-3.5.1

vtil-core

Virtual-machine Translation Intermediate Language

vxpack

一个开源的压缩壳

vxpack.github.io

vxpacklegacy

zmist

Updated z0mbie MISTFALL engine