Lists (8)
Stars
Windows Internals Book 7th edition Tools
Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials
🔥 ByteHook is an Android PLT hook library which supports armeabi-v7a, arm64-v8a, x86 and x86_64.
Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquir…
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support d…
A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.
Macro-header for compile-time C obfuscation (tcc, win x86/x64)
This is the upstream repository for the Security Enhanced Linux (SELinux) userland libraries and tools. The software provided by this project complements the SELinux features integrated into the Li…
Dump cookies and credentials directly from Chrome/Edge process memory
A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
thumb16 thumb32 arm32 inlineHook in Android
A modern 32/64-bit position independent implant template
Original C Implementation of the Hell's Gate VX Technique
Remote operations commands implemented using Beacon Object Files
Filesystem monitor tool for Linux/Android iOS/macOS
Cross-platform instrumentation and introspection library written in C
A collection of vulnerable ARM binaries for practicing exploit development