jilvan1234

Fooocus

Focus on prompting and generating

MS-DOS

The original sources of MS-DOS 1.25, 2.0, and 4.0 for reference purposes

OFGB

GUI Tool To Removes Ads From Various Places Around Windows 11

open-vm-tools

Official repository of VMware open-vm-tools project

WindowsInternals

Windows Internals Book 7th edition Tools

ExploitGSM

Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5

spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

wxsqlite3

wxSQLite3 - SQLite3 database wrapper for wxWidgets (including SQLite3 encryption extension)

PeaceMaker

PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.

EtwExplorer

View ETW Provider manifest

FindWDK

CMake module for building drivers with Windows Development Kit (WDK)

CVE-2024-21338

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

VMP-Imports-Deobfuscator

VMProtect 2.x-3.x x64 Import Deobfuscator

ThreadlessInject-C

This repository implements Threadless Injection in C

memhv

Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities

Shared-FlushFileBuffers-Communication

Cool kernel communication method.

KDP-compatible-driver-loader

KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys

UserManagerEoP

wxWidgetsTutorials

wxWidgets Tutorials

x64win-DynamicNoNull-WinExec-PopCalc-Shellcode

64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free

MacRootKit

macOS RootKit that can fuzz binaries/drivers, do kernel r/w, hook kernel and userspace functions, set custom breakpoints, GDB stub (in progress), match KDK kernels with DWARF debug symbols to release kernels, MachOs of all kinds, dyld shared caches, Objective C/Swift metadata, dump libraries, library injection (e.g. cycript), and crawl iOS apps

injection

Windows process injection methods

pocs

My Proof of Concept code for different publicly disclosed vulnerabilities

windows-rootkit

windows rootkit

AntiHook

Enum and Remove Hook in Windows

Mile.HyperV

The lightweight library for Hyper-V guest interfaces.

NDllInjector

Tool for injecting .net library in native process (or not native with some limitations).

VMBR

A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data

llvm_windows_kd_template

template to create a basic KM Driver with llvm-msvc

telegram-desktop-PoC

Due PoC basati sulla vulnerabilità RCE di telegram desktop.