Lists (19)
Starred repositories
64
stars
written in C
Clear filter
GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)
Small and highly portable detection tests based on MITRE's ATT&CK.
Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
clumsy makes your network condition on Windows significantly worse, but in a controlled and interactive manner.
nanomsg-next-generation -- light-weight brokerless messaging
eBPF implementation that runs on top of Windows
Simple (relatively) things allowing you to dig a bit deeper than usual.
EasyHook - The reinvention of Windows API Hooking
SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support d…
LSASS memory dumper using direct system calls and API unhooking.
Native API header files for the System Informer project.
A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
Hysteria's congestion control algorithm ported to TCP, as a Linux kernel module
A tiny hand crafted CPU emulator, C compiler, and Operating System
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams.
Libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.
Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …
Executes PowerShell from an unmanaged process
Verneuil is a VFS extension for SQLite that asynchronously replicates databases to S3-compatible blob stores.
Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll