shinvipo

Inline-Execute-PE

Execute unmanaged Windows executables in CobaltStrike Beacons

passivedns

A network sniffer that logs all DNS server replies for use in a passive DNS setup

docs

documentations, slides decks...

RichPE

Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks

Pentest-Cheatsheets

HackBrowserData

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

hwbp4mw

LightsOut

Generate an obfuscated DLL that will disable AMSI & ETW

my-infosec-awesome

My curated list of awesome links, resources and tools on infosec related topics

awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Open-Source-Threat-Intel-Feeds

This repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.

jarm

A list of JARM fingerprints from malicious IPs, matched against known C2 fingerprints.

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

Awesome-CobaltStrike-Defence

Defences against Cobalt Strike

WFH

Shinigami

A dynamic unpacking tool

sim-ba

(Sim)ulate (Ba)zar Loader

HellHall

Performing Indirect Clean Syscalls

maldev

Golang library for malware development

adversary_emulation_library

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

C2_Automation

C2 Automation using Linode

CFG-FindHiddenShellcode

Walks the CFG bitmap to find previously executable but currently hidden shellcode regions

One-Lin3r

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

RDI-SRDI

This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".

C-Cpp-Notes

Notes about modern C++, C++11, C++14 and C++17, Boost Libraries, ABI, foreign function interface and reference cards.

EATGuard

Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)

MalwareMorphology

malware4edu

Malware Samples that could be used for teaching students about malware analysis.

maldev-for-dummies

A workshop about Malware Development

awesome-malware-development

Organized list of my malware development resources