Lists (2)
Sort Name ascending (A-Z)
Starred repositories
Playground (and dump) of stuff I make or modify for the Flipper Zero
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Simple (relatively) things allowing you to dig a bit deeper than usual.
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
Research code & papers from members of vx-underground.
Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file
My implementation of enSilo's Process Doppelganging (PE injection technique)
This repository contains relevant samples and data related to the ELF Malware Analysis 101 articles