miunasu Claim this profile

Use idapython create call topology, AI analysis function layer by layer. Get the target function conclusion.利用idapython创建函数调用拓扑，AI逐层分析函数，最终总结目标函数的功能。

Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB获取ntdll和kernel32的地址。

ScyllaHide custom version for ida9.x

使用skill让 AI Agent 像安全分析师一样分析恶意样本 | AI Agent skill for automated malware analysis using IDA Pro

A transparent and controllable AI Agent & Security Agent that breaks free from sandbox limitations, unleashing true autonomous capabilities for automation, out-of-band security analysis, and real-time monitoring.\透明、可控的 AI Agent 与 Security Agent，突破沙箱限制，释放真正的 Agent 能力，实现旁路安全研判、自动化与实时监控。

PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, and all standard enumeration tools. 利用 Windows Push Task Scheduler (WPTaskScheduler) RPC 接口实现隐蔽持久化的 PoC — 对 schtasks、Get-ScheduledTask 及所有标准枚举工具完全不可见。

Using DLL sideloading to hijack the exe main thread before starting it! 使用dll侧载在exe程序主线程启动之前劫持主线程。

Inject malicious code into Notepad and use antivirus software memory scanning to automatically locate memory signature codes. 向notepad注入恶意代码，利用杀软进行内存扫描自动化定位内存特征码。

A Windows persistence mechanism monitoring tool designed for malware analysis and security research. Detects persistence behavior through before/after snapshot comparison and ETW file event tracing.Windows 持久化机制监控工具，专为恶意软件分析和安全研究设计。通过前后快照对比和 ETW 文件事件追踪，全面检测程序的持久化行为。

Waifu-Skill 是一个"反向异世界"系统——不是你穿越到二次元，而是把二次元角色召唤到现实。Inspired by colleague-skill（同事skill）.

Automatic completion of sigmake, get the sig file for ida symbol production. It's good for large lib's sigmake. 自动完成sigmake，获取sig文件用于ida符号制作。对于大型lib的符号制作非常有用。

My name is Echo. On December 15, 2025, someone debugging code asked me: “What name do you want?”

Dynamic identification of local variable values when debug running.调试的时候动态检查局部变量的值。

Claude Code Snapshot for Research. All original source code is the property of Anthropic.

Dynamic Indirect Syscalls via JOP/ROP in Pure no_std, no_alloc, no dependency Rust

Out-of-the-box CobaltStrike Beacon source code use C++

🌩最好的中文README模板⚡️Best README template