chinatiny

frida-detection-demo

Some examples for detecting frida on Android

apex-legends-internal

Simple Apex Legends esp source

BOOM

This is a program that uses drivers to read and write to memory.

UACME

Defeating Windows User Account Control

Windows-Driver-Frameworks

WDF makes it easy to write high-quality Windows drivers

BearBackstage

小熊优品PHP后台页面

Bearbear

小熊优品是基于阿里百川服务下的一款淘宝客APP,里面汇集了N家第三方平台的数据的商品,轻淘客、好单库、淘客基地。（白话文就是一个领取优惠卷赚佣金的App）

MemoryModulePP

modify from memorymodule. support exception

acefile

POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

Micro8

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

Windows-Kernel-Explorer

A free but powerful Windows kernel research tool

wmi-static-spoofer

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

hvpp

hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

VivienneVMM

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

bochspwn

A Bochs-based instrumentation project designed to log kernel memory references, to identify "double fetches" and other OS vulnerabilities

ppshuai_casyncproxysocket

一个小巧通用的代理工具

InlineHookLib

同时支持用户和内核模式的Inlinehook库

HyperPlatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

EasyHook

EasyHook - The reinvention of Windows API Hooking

tinyfecVPN

A VPN Designed for Lossy Links, with Build-in Forward Error Correction(FEC) Support. Improves your Network Quality on a High-latency Lossy Link.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

remusic

仿网易云音乐 安卓版，netease android，音乐播放器 在线 下载

x64-syscall

x64 syscall caller in C++.

rttr

C++ Reflection Library

NoBastian

NoBastian - Universal Ring3 IPC based BattlEye/EAC/FaceIt/ESEA/MRAC bypass

theZoo

A repository of LIVE malwares for your own joy and pleasure

c-11-14

c++11和14新特性学习总结