dosnow Goto Github PK

aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

anti-antidebuggerdriver

VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

apex_legends_driver_cheat

bianchengyulu

个人总结的经验语录

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

chfsgui

This is just a GUI WRAPPER for chfs(cute http file server)

codemake

esig文件生成工具

cve-2019-0708-exp-windows

CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell

direct-ntcreateuserprocess

Call NtCreateUserProcess directly as normal.

divert

WinDivert: Windows Packet Divert

dll2shellcode

dll转shellcode工具

dll_to_exe

Converts a DLL into EXE

dlltoshellcode

Fast Conversion Windows Dynamic Link Library To ShellCode

driverinjectdll

Using Driver Global Injection dll, it can hide DLL modules

e-debug

X64Dbg插件，分析易语言必备神器

e-debug-plus

易语言辅助调试工具

e-decompiler

用来辅助分析易语言程序的IDA插件

elibstl

🎃易语言核心库拓展

everything

探索Everything背后的技术（USN和MFT）

exe_to_dll

Converts a EXE into DLL

gfiratclient

gfiratserver

hideprocesshook

DLL that hooks the NtQuerySystemInformation API and hides a process name

hp-socket

High Performance TCP/UDP/HTTP Communication Component

httpinterface

Windows上C++封装的HTTP库，包含三种实现模式（WinInet、WinHttp、socket）

hyperdbg

The Source Code of HyperDbg Debugger 🐞

hyperhide

Hypervisor based anti anti debug plugin for x64dbg

inlinehooklib

同时支持用户和内核模式的Inlinehook库