zer0cat

codasm

Payload encoding utility to effectively lower payload entropy.

UASM64-Library

The UASM64 Library is a port of the functions from the MASM32 Library

BSides-2024-Malware-Development-101-From-Zero-to-Non-Hero

injection-monitor

Kernel based monitor to check if specified process loads libraries only from allowed directories

proxychains-windows

Windows and Cygwin port of proxychains, based on MinHook and DLL Injection

pedump

dump windows PE files using ruby

i8086emu

An Intel 8086 CPU Emulator written in pure PHP.

Dependencies

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

Powercfg

Reversing and reimplementing "powercfg /requests" using Native API

Priv2Admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

SigFlip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

PR0CESS

some gadgets about windows process and ready to use :)

dll-merger

Merging DLLs with a PE32 EXE without LoadLibrary

libraries

Collection of libraries for use with x86 / x64 assembler

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

conways-game-of-life

Fast Conway's Game of Life in JavaScript and canvas

n00bk1t

flare-wmi

SyscallTables

Windows NT Syscall tables

PDB-Downloader

PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.

experiments

Expriments

aes-js

A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.

basic_rpc

Samples about Microsoft RPC and native API calls in Windows C

chacha8-js

A pure javascript ChaCha8 cipher implementation

injection

LeoSpecial-VEH-Hook

Vectored Exception Handling Hooking Class

PSBits

Simple (relatively) things allowing you to dig a bit deeper than usual.

NtTrace

An strace-like program for the Windows 'native' API

bddisasm

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

Minimalistic-offensive-security-tools

A repository of tools for pentesting of restricted and isolated environments.