cofarmer

SyscallTables

Windows NT Syscall tables

Nidhogg

Nidhogg is an all-in-one simple to use rootkit.

SPITkey

Decrypt the bitlocker FVEK for a bitlocker encrypted drive.

TitanHide

Hiding kernel-driver for x86/x64.

bindiff

Quickly find differences and similarities in disassembled code

VolWeb

A centralized and enhanced memory analysis platform

signature-base

YARA signature and IOC database for my scanners and tools

MS-DOS

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

tiny11builder

Scripts to build a trimmed-down Windows 11 image.

coldboot-tools

coldboot-tools

ceval

Official github repo for C-Eval, a Chinese evaluation suite for foundation models [NeurIPS 2023]

sigrok-cli

Read-only mirror of the official repo at git://sigrok.org/sigrok-cli. Pull requests welcome. Please file bugreports at sigrok.org/bugzilla.

DSView

An open source multi-function instrument for everyone

LpcAnalyzer

Low Pin Count (LPC) Analyzer for Saleae Logic

TPM-Sniffing

A repo for TPM sniffing greatness

pico-tpmsniffer-spi

icestick-lpc-tpm-sniffer

FPGA-based LPC bus sniffing tool for Lattice iCEstick Evaluation Kit

lpc_sniffer

a low pin count sniffer for icestick

DllLoaderShellcode

Shellcode to load an appended Dll

VectorKernel

PoCs for Kernelmode rootkit techniques research.

CVE-2023-36874

PichichiH0ll0wer

Nim process hollowing loader

stablediffusion

High-Resolution Image Synthesis with Latent Diffusion Models

Ventoy

A new bootable USB solution.

MutationGate

Use hardware breakpoint to dynamically change SSN in run-time

EfiGuard

Disable PatchGuard and Driver Signature Enforcement at boot time

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pico-tpmsniffer

A simple, very experimental TPM sniffer for LPC bus

pwntools

CTF framework and exploit development library

skrapa

A zero dependency and customizable Python library for scanning Windows and Linux process memory.