APT64

APT64's Stars

• LordNoteworthy/al-khaser

  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

  Language:C++5.9k2421021.2k

• ldpreload/BlackLotus

  BlackLotus UEFI Windows Bootkit

  Language:C2k3122472

• ExpLife0011/awesome-windows-kernel-security-development

  windows kernel security development

  2k1332538

• es3n1n/no-defender

  A slightly more fun way to disable windows defender + firewall. (through the WSC api)

  1.9k18711

• hfiref0x/WinObjEx64

  Windows Object Explorer 64-bit

  Language:C1.7k6622295

• khast3x/Redcloud

  Automated Red Team Infrastructure deployement using Docker

  Language:Python1.2k5017203

• NUL0x4C/AtomPePacker

  A Highly capable Pe Packer

  Language:C6882115118

• SergeyBel/AES

  C++ AES implementation

  Language:C++5291535161

• memN0ps/redlotus-rs

  Rusty Bootkit - Windows UEFI Bootkit in Rust (Codename: RedLotus)

  Language:Rust52310063

• namazso/MagicSigner

  Signtool for expired certificates

  Language:C++46215151

• realoriginal/bootlicker

  A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

  Language:C40313283

• hackerschoice/ssh-key-backdoor

  Language:Shell3354045

• varwara/CVE-2024-26229

  CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code

  Language:C3306663

• francisck/DanderSpritz_docs

  The goal of this project is to examine, reverse, and document the different modules available in the Equation Group's DanderSpritz post-exploitation framework leaked by the ShadowBrokers

  Language:Python30228393

• Cr4sh/SmmBackdoorNg

  Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

  Language:C29110048

• rainerzufalldererste/windows_x64_shellcode_template

  An easily modifiable shellcode template for Windows x64 written in C

  Language:C2005030

• alfarom256/CVE-2022-3699

  Lenovo Diagnostics Driver EoP - Arbitrary R/W

  Language:C++1705047

• MovAX0xDEAD/NTOSKRNL_Emu

  Library of missed NTOSKRNL import functions

  Language:C10310920

• rhotav/Crypto-Deobfuscator

  A Deobfuscator for Crypto Obfuscator

  Language:C#10314241

• ereb-thanatos/cossacks3-lan-server

  A cross-platform server for the RTS Cossacks 3, intended for use in local area networks.

  Language:C++8171418

• zerosum0x0-archive/archive

  531023

• RedSiege/GPPDeception

  This script generates a groups.xml file that mimics a real GPP to create a new user on domain-joined computers

  Language:PowerShell443010

• ktp0li/crocum

  OpenNebula-based PaaS for deployment and checking network labs

  Language:Python8200

• APT64/KernelAVKiller

  Antivirus killer using ring-0 kernel driver. Antivirus processes will automatically close while the killer is running.

  Language:C++6140

• ktp0li/summus

  🥇first place on kibhack hackathon | telegram bot for cloud.ru management

  Language:Python4102

• ktp0li/brevis

  simple link shortener

  Language:Go3100

• ktp0li/ktp0li

  !kapybara!

  3100

• wolfcod/NtfsPkg

  Language:C3332

• DarkSuana/AstraLinux-Scripts

  Language:Shell2101

• ktp0li/tessera

  test assignment for an internship in VK

  Language:Python210