0xulbera

0xulbera's Stars

• pankoza2-pl/Malware2.0Database

  My new malware database, the old one is now archived and all my new malwares will be uploaded here instead. As always, this is made for educational purposes only, I'm not responsible for any damages

  Language:C++4110

• pikulet/anti-debugging

  demo of common anti-analysis techniques used by malware

  Language:C163

• Data3rr/Res0luti0n

  (Beta) RES0LUTI0N is a malware builder undetected by Windows Defender with an anti-VM coded in python and C#. It uses a triple layer randomized obfuscation system, a malware partitioning system and a recompilation system at the same time.

  Language:Python446

• encryptedmind/Windows-Malware-Analysis-Essentials-Code-Repo

  Contains the code repository for the book - "Windows Malware Analysis Essentials (Packt 2015)"

  92

• whichbuffer/ReverseShell

  Stealthy Windows backdoor

  Language:C++143

• whokilleddb/injection-for-dummies

  A collection of PoCs for different injection techniques on Windows!

  Language:C425

• mrexodia/dumpulator

  An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

  Language:C75444

• AzAgarampur/PsForge

  Process Hollowing demonstration & explanation

  Language:C++329

• JustasMasiulis/lazy_importer

  library for importing functions from dlls in a hidden, reverse engineer unfriendly way

  Language:C++1.7k222

• GuillaumeOrlando/Windows_Malware_Emulator

  Emulator for Windows Malware Analysis

  Language:Python152

• De3vil/WinPersistence

  Some of the techniques used in Malware Windows - Persistence(Registry HKCU,startup),Disable Windows Firewall,Disable Windows Defender

  204

• RamadhanAmizudin/malware

  Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from: http://www.malwaretech.com

  Language:C++1k768

• NavyTitanium/Fake-Sandbox-Artifacts

  This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

  Language:Python25012

• Mayachitra-Inc/MaleX

  A curated dataset of malware and benign Windows executable samples for malware researchers

  Language:HTML398

• brosck/Frosty

  「🧊」Ring 3 Rootkit for Windows 10

  Language:C5515

• CYB3RMX/Qu1cksc0pe

  All-in-One malware analysis tool.

  Language:YARA1.3k187

• trevorsaudi/Zero-Import-Malware

  Small project looking into how we can build malware with zero-imports by dynamically resolving windows APIs using GetProcAddress and GetModuleHandle windows APIs.

  Language:C++377

• mgeeky/UnhookMe

  UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red Teams malware

  Language:C++34149

• enkomio/thematrix

  a PE Loader and Windows API tracer. Useful in malware analysis.

  Language:Assembly13719

• activescott/lessmsi

  A tool to view and extract the contents of an Windows Installer (.msi) file.

  Language:C#1.3k153

• RexProg/ILProtectorUnpacker

  ILProtector Unpacker Script

  Language:C#10945

• chris2511/xca

  X Certificate and Key management

  Language:C++1.6k204

• x-nas/WinsockPacketEditor

  WPE x64 is a Windows software that can intercept and modify WinSock packets, with adaptive support for 32-bit and 64 bit target programs WPE x64 是一款可以拦截并修改 WinSock 封包的 Windows 软件，自适应支持 32 位及 64 位的目标程序

  Language:C#27574

• 521xueweihan/GitHub520

  :kissing_heart: 让你“爱”上 GitHub，解决访问时图裂、加载慢的问题。（无需安装）

  Language:Python23.4k2.3k

• DonaldTrump0/LordPE

  PE解析工具

  Language:C++4510

• detekt/detekt

  Static code analysis for Kotlin

  Language:Kotlin6.3k777

• ayuthmang/.Net-Reverse-Engineering

  Resources, tools about .net reverse engineering.

  7914

• x64dbg/ScyllaHide

  Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

  Language:C++3.5k434

• slowmist/Blockchain-dark-forest-selfguard-handbook

  Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

  5.5k653

• rootpencariilmu/Redlinestealer2020

  New Redline Leak

  Language:Batchfile12539