ylkcy Goto Github PK

books

研究生看过的书籍

bpftrace

High-level tracing language for Linux eBPF

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

c

linux下的C语言及关于kernel的介绍

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

changcheng

对windows-api内容进行自动审查和过滤监控

clash_for_windows_pkg

A Windows/macOS GUI based on Clash

classinformer-ida7

ClassInformer backported for IDA Pro 7.0

cmakeconverter

This project aims to facilitate the conversion of Visual Studio to CMake projects.

codeofassembly

《x86汇编语言-从实模式到保护模式》源码

cryptopp

free C++ class library of cryptographic schemes

cs-doc

cuteos-references

Documentation, references, and collected academic research for the cuteOS Kernel.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dank

Windows 8.1 driver loader & BattlEye bypass.

datacommunication

A kernelmode driver swapping a .data pointer in the kernel to perform communication between the kernel and usermode.

debug-learn

软件调试学习

delete-self-poc

A way to delete a locked file, or current running executable, on disk.

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

detect-mouseclassservicecallback

mouseclassservicecallback detection via hook

dinjector

Collection of shellcode injection techniques packed in a D/Invoke weaponized DLL

direct-efi-apex-cheat

divert

WinDivert: Windows Packet Divert

dll2def

Command line tool to create an export defintion file from a dynamic link library

dobby

a lightweight, multi-platform, multi-architecture hook framework.

doctotext

Converts DOC, XLS, XLSB, PPT, RTF, ODF (ODT, ODS, ODP), OOXML (DOCX, XLSX, PPTX), iWork (PAGES, NUMBERS, KEYNOTE), ODFXML (FODP, FODS, FODT), PDF, EML and HTML documents to plain text. Extracts metadata and annotations.

doubledatapointer

Double data pointer communication in to the kernel mode

driver-hijack

driverlearn

驱动学习