Resources related to GitHub Security Lab

Sleep Obfuscation

nginx WebShell/内存马，更优雅的nignx backdoor

LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON

无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API

Joern Workshops