ror13h Goto Github PK

loki

Loki - Simple IOC and Incident Response Scanner

malicious

ASM Malicious code - PE infector

malware

malware source codes

malware-ioc

Indicators of Compromises (IOC) of our various investigations

matroschka

Python steganography tool to hide images or text in images

memorymon

Detecting execution of kernel memory where is not backed by any image file

metame

metame is a metamorphic code engine for arbitrary executables

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

mofang

Mofang Indicators of Compromise

morphaes

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode/malware engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.

my-little-ransomware

easy ransomware module base on csharp.

netripper

NetRipper - Smart traffic sniffing for penetration testers

netshhelperbeacon

Example DLL to load from Windows NetShell

obfusion

Obfusion - C++ X86 Code Obfuscation Library

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

pafishmacro

Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.

paradise

x86/x86-64 hooking library

php-backdoors

A collection of PHP backdoors. For educational or testing purposes only.

pocs

polyhook

x86/x64 C++ Hooking Library

pony

Pony 2.0 Stealer

powerloaderex

PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

powershell-suite

My musings with PowerShell

psgshell

Black Hills Info Sec has a great tool on Byt3Bl33d3rs github utilizing Gmail as C2 tansport. Using that Idea I wanted something that did the same with powershell.

python-x86-obfuscator

This is a **WIP** tool that performs shellcode obfuscation in x86 instruction set.

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

regf

Windows registry file format specification

rootkits

Recopilación de rootkits

rules

Repository of yara rules

security-tools

Security tools, scanners, exploit code