ricardobuuueno

nanodump

The swiss army knife of LSASS dumping

winc

Common library for Go GUI apps on Windows

libpe

Library for parsing internal structures of PE32/PE32+ binary files.

SysWhispers2

AV/EDR evasion via direct system calls.

Dumpert

LSASS memory dumper using direct system calls and API unhooking.

Antivirus-Artifacts

Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

PowerShdll

Run PowerShell with rundll32. Bypass software restrictions.

Lsass-Shtinkering

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

Pyramid

a tool to help operate in EDRs' blind spots

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

CLRvoyance

Managed assembly shellcode generation

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Covenant

Covenant is a collaborative .NET C2 framework for red teamers.

dllloader

Library for native Windows dll's loading into RAM

mimikatz

A little tool to play with Windows security

TerraLdr

A Payload Loader Designed With Advanced Evasion Features

HandleKatz

PIC lsass dumper using cloned handles

GuidedHacking-Injector

The BEST DLL Injector Library.

proxy

Proxy: Next Generation Polymorphism in C++

3proxy

3proxy - tiny free proxy server

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

theZoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

PMAT-labs

Labs for Practical Malware Analysis & Triage

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Process-Hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

PortEx

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Practical-Ethical-Hacking-Resources

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

json

JSON for Modern C++

AnyAny

C++17 library for comfortable and efficient dynamic polymorphism