kycgni Goto Github PK

followers: 7.0 following: 79.0 repos: 215.0 gists: 0.0

Name: kycgni

Type: User

Location: hangzhou

kycgni's Projects

persistence_demos

Demos of various (also non standard) persistence methods used by malware

pesignanalyzer

This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signed (nested) infomation and certificate-chain.

phant0m

Windows Event Log Killer

phnt

Native API header files for the Process Hacker project.

pigaios

A tool for matching and diffing source codes directly against binaries.

process-dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

process-hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

processor-trace

libipt - an Intel(R) Processor Trace decoder library

protobuf

Protocol Buffers - Google's data interchange format

proxygen

A collection of C++ HTTP libraries including an easy to use HTTP server.

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

re_sysdiag

逆向火绒安全软件驱动——sysdiag

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.