a10ncoder Goto Github PK

logs-monitor

An application like Linux tail for Windows. Using Windows FindFirstChangeNotification API to monitoring file changes.

magiclib

Non organized Cpp code files I used for my research on Windows

mak_it-linux-rootkit

This is a linux rootkit using many of the techniques described on http://r00tkit.me

makin

makin - reveal anti-debugging and anti-VM tricks

malware

Malware Samples. Uploaded to GitHub for those want to analyse the code.

malware_sources

malwareapilibrary

collection of apis used in malware development

mapping-injection

Just another Windows Process Injection

mbrfilter

Cisco Talos MBR Filter Driver

memhunter

Live hunting of code injection techniques

memorymodule

Library to load a DLL from memory.

memorymon

Detecting execution of kernel memory where is not backed by any image file

memorypatchdetector

Detects code differentials between executables in disk and the corresponding processes/modules in memory

memoryranger

MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. MemoryRanger has been presented at the BlackHat, HITB, CDFSL.

memorysharp

A C# based memory editing library targeting Windows applications, offering various functions to extract and inject data and codes into remote processes to allow interoperability.

minihypervisorproject

IntelVT-X nice feature -> tool

minivisorpkg

The research UEFI hypervisor that supports booting an operating system.

module_overloading

A more stealthy variant of "DLL hollowing"

moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

mprotect

ms17-010

MS17-010

ntoskrnl

The Windows Research Kernel (WRK)

observer

offensiverust

Rust Weaponization for Red Team Engagements.

opendtrace

Code for the cross platform, single source, OpenDTrace implementation

openedr

Open EDR public repository

opennt-minkernel

OpenNT MinKernel Component

orange_slice

A research kernel and hypervisor attempting to get fully deterministic emulation with minimum performance cost

password_scrambler

Password scrambler - small util to make your easy passwords complicated!

patchguard

*NIX Kernel PatchGuard Implementation