roadwy's repositories
DefenderYara
Extracted Yara rules from Windows Defender mpavbase and mpasbase
SideloadFinder
frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can later be weaponized during Red Team Operations to evade AV/EDR's.
SIGNATURE_TYPE_LUASTANDALONE
Extracted lua script from Defender mpavbase.vdm and mpasbase.vdm
Game-Cheating-Tutorial
热门网络游戏辅助开发教程
DataRecovery
数据恢复相关
awesome-malware-analysis
A curated list of awesome malware analysis tools and resources
EnMicroMsg.db-Password-Cracker
Crack the password of EnMicroMsg.db with brute-force attack.
glibc_version_header
Build portable Linux binaries without using an ancient distro
HandleMaster
Changes handle's access rights using DKOM with a vulnerable driver
HatLab_IOT_Wiki
海特实验室物联网安全知识库
ioc
Threat Intel IoCs + bits and pieces of dark matter
Plugme-OllyDBGv1.0
OllyDBG v1.0 Plugins
rathole
A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.
TelemetrySourcerer
Enumerate and disable common sources of telemetry used by AV/EDR.
WebMonitor
实时监控网页变化,并发送通知(Monitor web page changes in real time and send notifications)
windbg-extensions
Various extensions for WinDbg
windbg-plugins
Any useful windbg plugins I've written.