mooolight Goto Github PK

amdh

Android Mobile Device Hardening

apc-research

APC Internals Research Code

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

black-angel-rootkit

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

blackout

kill anti-malware protected processes (BYOVD)

bookcode

Source code for my books

bootkit-rs

Rusty Bootkit - Windows UEFI Bootkit in Rust

byob

An open-source post-exploitation framework for students, researchers and developers.

cavecarver

CaveCarver - PE backdooring tool which utilizes and automates code cave technique

chaos-rootkit

x64 ring0 Rootkit with Process Hiding and Privilege Escalation Capabilities

cminer

Cminer is a tool for enumerating the code caves in PE files.

computersecurityattacks

Contains SEED Labs solutions from Computer Security course by Kevin Du.

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

cs-roadmap

My Computer Science Curriculum

csexec

An implementation of PSExec in C#

ctfd

CTFs as you need them

ctfd-docker-deploy

Repository to deploy CTFd using docker.

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

detectionlab

Automate the creation of a lab environment complete with security tooling and logging best practices

detectionlabelk

DetectionLabELK is a fork from DetectionLab with ELK stack instead of Splunk.

direct-syscalls-a-journey-from-high-to-low

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

dirty-vanity

A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.html#dirty-vanity-a-new-approach-to-code-injection--edr-bypass-28417

dumpert

LSASS memory dumper using direct system calls and API unhooking. - Gitting gud

ebook-bypassingavsbycsharp

eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)

exploitation-course

Offensive Software Exploitation Course

forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

hellhall

Performing Indirect Clean Syscalls

home_soc_lab-ir_process

how2heap

A repository for learning various heap exploitation techniques.