Beast code in Giters

MalwareTech's repositories

EDR-Preloader

An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

Language:C++367 4 1

TrickBot-Toolkit

A collection of tools for dealing with TrickBot

Language:Python198 16 1

EDRception

A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

Language:C++156 20

ZombifyProcess

Inject code into a legitimate process

Language:C++141 13 1

TinyXPB

Windows XP 32-Bit Bootkit

Language:C138 17 2

AppContainerSandbox

An example sandbox using AppContainer (Windows 8+)

Language:C++130 10 1

CreateDesktop

Example application for creating multiple desktops on Windows

Language:C++127 13 1

FakeMBR

TDL4 style rootkit to spoof read/write requests to master boot record

Language:C++125 11 2

CitrixHoneypot

Detect and log CVE-2019-19781 scan and exploitation attempts.

Language:HTML114 8 3

Log4jTools

Tools for investigating Log4j CVE-2021-44228

Language:Python95 7 3

BasicHook

x86 Inline hooking engine (using trampolines)

Language:C91 10 3

HiddenDesktop

Create and enumerate hidden desktops.

Language:C85 10

RDGScanner

A proof-of-concept scanner to check an RDG Gateway Server for vulnerabilities CVE-2020-0609 & CVE-2020-0610.

Language:Python72 8 1

FstHook

A library for intercepting native functions by hooking KiFastSystemCall

Language:C++71 90

UACElevator

Passive UAC elevation using dll infection

Language:C++68 12 1

Beginner-Reversing-Challenges

https://www.malwaretech.com/beginner-malware-reversing-challenges

50 4 1

MSDIA-x64

Enable Microsoft PDB support in Ghidra without installing Visual Studio

Language:Batchfile40 40

SpookySSLTools

Example tools for detecting software using OpenSSL 3.0.0 - 3.0.6 (vulnerable to latest unnamed vulnerability)

Language:PowerShell39 3 1

FollinaExtractor

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

Language:Python30 20

SimpleEpollServer

An example epoll imlementation with C++11

Language:C++28 20

NeutrinoBotHack

SQL injection in Neutrino panel

Language:Python8 40

PhaseHack

Phase C&C Blind SQL Injection

Language:Python8 4 1

PhaseDump

Python tool for decrypting W32/Phase modules

Language:Python5 30