nblog

crashpad

A crash-reporting system

ReadWriteDriver

Read Write Memory without attach

CheatEngine-DMA

Cheat Engine Plugin for DMA users

ghidriff

Python Command-Line Ghidra Binary Diffing Engine

SKLib

Standard Kernel Library for Windows hacking in C++

PointerSearcher-X

An application for finding memory pointers.

PythonForWindows

A codebase aimed to make interaction with Windows and native execution easier

SysmonCommunityGuide

TrustedSec Sysinternals Sysmon Community Guide

magika

Detect file content types with deep learning

pycdc

C++ python bytecode disassembler and decompiler

nyxstone

Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com

vfdynf

Application Verifier Dynamic Fault Injection

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

Windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.

DTrace-on-Windows

Code for the cross platform, single source, OpenDTrace implementation

Hypervisor-From-Scratch

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

Musa.Runtime

The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.

LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

VsLinuxDebug

VS Extension to remotely deploy and debug your .NET (Core) C# solutions directly to your Linux or Raspberry Pi devices! .NET Core 3.1, .NET 5, 6, 7, 8, 9

obfusheader.h

Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

bloaty

Bloaty: a size profiler for binaries

z3guide

Tutorials and courses for Z3

CrackMaster

x86/x64 Ring 0/-2 System Freezer/Debugger

cxplat

Cross platform, C abstraction layer for both user mode and kernel mode libraries

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Mergen

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

memview

Memory View to examine memory from programs being debugged

RemoteCall

highlight.js

JavaScript syntax highlighter with language auto-detection and zero dependencies.

pfr

std::tuple like methods for user defined types without any macro or boilerplate code