driverxdw

aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

ebpfkit

ebpfkit is a rootkit powered by eBPF

mach_inject

interprocess code injection for Mac OS X

cargo-bundle

Wrap rust executables in OS-specific app bundles

magic-in-ten-mins-rs

十分钟魔法练习 in Rust

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

Windows-driver-samples

This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

wps-rce

WPS Office RCE On 2023-08-10

gperftools

Main gperftools repository

unrar

Unrar source code from rarlab.com

rust-course

“连续六年成为全世界最受喜爱的语言，无 GC 也无需手动内存管理、极高的性能和安全性、过程/OO/函数式编程、优秀的包管理、JS 未来基石" — 工作之余的第二语言来试试 Rust 吧。<<Rust语言圣经>>拥有全面且深入的讲解、生动贴切的示例、德芙般丝滑的内容，甚至还有JS程序员关注的 WASM 和 Deno 等专题。这可能是目前最用心的 Rust 中文学习教程 / Book

volatility

An advanced memory forensics framework

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

malware-samples

A collection of malware samples caught by several honeypots i manage

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

InfinityHook

Hook system calls, context switches, page faults and more.

mini-filter-driver-framework

A mini filter driver development framework allows you to develop minit filter driver with different features.

MiniHIPS

[WIP] A FOSS hook-powered HIPS for Windows / 火绒文件防御功能开源实现

Huorong-ATP-Rules

一款火绒增强HIPS自定义规则

notify

🔭 Cross-platform filesystem notification library for Rust.

Detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

clamav

ClamAV - Documentation is here: https://docs.clamav.net

Antivirus-Artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

uber_go_guide_cn

Uber Go 语言编码规范中文版. The Uber Go Style Guide .

whids

Open Source EDR for Windows

golang-etw

EDRs

BypassAV

This map lists the essential techniques to bypass anti-virus and EDR

WatchAD2.0

WatchAD2.0是一款针对域威胁的日志分析与监控系统

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.