x86byte

Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries

LLVM fork with explicit compatibility with MSVC 2022 features.

Compile-time AES string obfuscation for C++

Reverse Engineering and Malware Analysis Roadmap

Stuxnet extracted binaries by reversing & Stuxnet Rootkit Analysis

LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis

Let's dive deeper into some key aspects of Inline Hooking in C++

Windows Exploit development : Bypass Data Execution Prevention (DEP) using ROP chains manually hard code

Malicious Shortcut(.lnk) Generator

iOS 12.1 in QEMU - Docker Wrapper

Intermediate x86 instruction representation for use in obfuscation/deobfuscation.

🪅 Windows User Space Emulator

Search for code cave in all binaries

Various public documents, whitepapers and articles about APT campaigns

Collection of various malicious functionality to aid in malware development

APT & CyberCriminal Campaign Collection

Android malware source code dataset collected from public resources.

Curated archive of tools from the Wikileaks CIA hacking tool leak, pull requests welcome https://wikileaks.org/ciav7p1/

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Gather and update all available and newest CVEs with their PoC.

An anti-hacking compiler forked from the ollvm (https://github.com/obfuscator-llvm/obfuscator)

:octocat: Machine Learning for Cyber Security

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理

ill learn here more about asmjit, rust (am not a femboy but ill learn rust), zig, java, zydis

Satana Bootkit ransomware

Deobfuscation and Analysis of Ring-1.io

x86_x64 to LLVM IR lifting Results

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

Pegasus exploit port to iOS

No description.

SysCaller: SDK for WindowsAPI via syscalls. Dynamic Resolution, Obfuscation, Multi-Language Bindings, & more!

C++17 Functional Template Metaprogramming Library

All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit

Snowman Decompiler for x64dbg (LOOKING FOR MAINTAINER)

Popular Android malware seen in 2020

No description.

Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North Korean APT InkySquid / ScarCruft / APT37. TTP: Use Microsoft Graph API for C2 Operations.

牛屎花 一款基于WEB界面的远程主机管理工具

高危漏洞利用工具

No description.

APTnotes data

Interesting APT Report Collection And Some Special IOC

pwn++ is a Windows & Linux library oriented for exploit dev but mostly used to play with modern C++ features (17->26)

Déploiement of Havoc C2 in docker

No description.

My CP Problems Submissions

Examples of leaking Kernel Mode information from User Mode on Windows

Striga is an experimental lifter from x86_64 to LLVM IR written in Python.

codeforcing our self until reaching (C++ what ?)

(0day) Local Privilege Escalation in IObit Malware Fighter

Automatic verification of LLVM optimizations

C++20 Meta-Programming library

Simple utility that allows you to automatically unload/reload an x64dbg plugin while developing with Visual Studio.

Documentation repository.

Plugin template for x64dbg.

Android 14 kernel exploit for Pixel7/8 Pro

A free Windows-compatible Operating System

Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities

MacOS S

Windows XP 32-Bit Bootkit

💾 Master Boot Record with a boot menu written in Assembly

A game of bricks and paddle on one boot sector (510 bytes)

各种乱七八糟的收集, 51pwn.com大数据平台模糊查询

Advanced Windows Exploitation (AWE) preparation

This framework enables user to discover JOP gagdets and can automate building a complete JOP chain to bypass DEP. JOP ROCKET is the ultimate solution for Windows jump-oriented programming. JOP ROCKET also finds the novel two-gadget dispatcher, which greatly expands what is possible with JOP.

PEDA - Python Exploit Development Assistance for GDB

The Havoc Framework.