moval0x1

Charles Lomboni's starred repositories

malduck

:duck: Malduck is your ducky companion in malware analysis journeys

Language:PythonGPL-3.031400

YouGotReversed

This repository contains malware samples that I reverse engineered.

Language:Go100

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Language:CBSD-2-Clause201700

Win10SysProgBookSamples

Windows 10 System Programming book samples

Language:C++MIT40700

pe_to_shellcode

Converts PE into a shellcode

Language:C++BSD-2-Clause235400

awesome-intelligence-writing

Collection of awesome resources on intelligence writing, including manuals/guides, standards, books, tranings, articles, videos, etc

CC-BY-SA-4.051700

Simple-Malicious-Programs

Repository with simples C binary samples for beginners REs & Defenders

GPL-3.01000

winsos-poc

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Language:C++MIT10800

mfanalyzer

A tool for quick and dirty analysis of suspicious files. Designed to run inside Remnux!

Language:PythonGPL-3.0400

BlackLotus

BlackLotus UEFI Windows Bootkit

Language:C195600

sclauncher

A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.

Language:CMIT12200

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

Language:HTMLMIT37600