ilbaroni Goto Github PK

nc.exe

Netcat for windows 32/64 bit

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

obfuscator

offensiverust

Rust Weaponization for Red Team Engagements.

oscp-tools

Tools I've written for help with the Offensive Security Certified Professional coursework.

packetstorm-exploits

Collection of publicly available exploits from Packetstorm

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

patching

An Interactive Binary Patching Plugin for IDA Pro

pe-dump-fixer

PE-Dump-Fixer

pecloakcapstone

Platform independent peCloak fork based on Capstone

pics

Posters, drawings...

poc

Proof of Concepts

poc-fake-msxfs

Fake msxfs.dll to debug ATM trojans

powerloaderex

PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

powerlurk

Malicious WMI Events using PowerShell

ppdump-public

Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDump() Shellcode

printnightmare

process-dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

procmon-filters

SysInternals' Process Monitor filters repository - collected from various places and made up by myself. To be used for quick Behavioral analysis of testing specimens. Inspired and based on Lenny Zeltser's collection.

pskernel-primitives

Exploit primitives for PowerShell

pybeacon

A collection of scripts for dealing with Cobalt Strike beacons in Python

pyiatrebuild

Automatically rebuild Import Address Table for dumped PE file. With python bindings!

pyinstxtractor

PyInstaller Extractor

pyserpent

serpent encryption in python

python-ecdsa

pure-python ECDSA signature/verification and ECDH key agreement

python-syntax

Python syntax highlighting for Vim

qakbot-dga

Writeup of QakBot's DGA, as well as a C implementation

r2con2021_deobfuscation

Workshop Material on VM-based Deobfuscation

ratdecoders

Python Decoders for Common Remote Access Trojans

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.