ciyze0101's repositories
al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Alcatraz
x64 binary obfuscator
AV-Bypass-Learning
免杀学习笔记
awesome-game-security
awesome game security [Welcome to PR]
awesome-llvm-security
awesome llvm security [Welcome to PR]
BlackLotus
BlackLotus UEFI Windows Bootkit
bootkit-rs
Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)
FreeRDP
FreeRDP is a free remote desktop protocol library and clients
gyp
gyp: A pure Go YARA parser
HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
Jormungandr
Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
lsassy
Extract credentials from lsass remotely
Magisk
The Magic Mask for Android
mimikatz
A little tool to play with Windows security
NimExec
Fileless Command Execution for Lateral Movement in Nim
Process-Hollowing
Great explanation of Process Hollowing (a Technique often used in Malware)
pypsrp
PowerShell Remoting Protocol for Python
r77-rootkit
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
rustdesk
Virtual / remote desktop infrastructure for everyone! Open source TeamViewer / Citrix alternative.
rustdesk-server
RustDesk Server Program
Sandboxie
Sandboxie Plus & Classic
selinux
This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Linux kernel and is used by Linux distributions. All bugs and patches should be submitted to selinux@vger.kernel.org
Sentinel
A powerful flow control component enabling reliability, resilience and monitoring for microservices. (面向云原生微服务的高可用流控防护组件)
signature-base
YARA signature and IOC database for my scanners and tools
systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
tdesktop
Telegram Desktop messaging app
wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
windows-rs
Rust for Windows
yara
The pattern matching swiss knife