Pinned Repositories
100-Days-of-ML-Code-Chinese-Version
Chinese Translation for Machine Learning Infographics
ACL-nuller
Assembly to NULL ACL on Windows 8.1 x64
ACL_Edit
Assembly code to use for Windows kernel shellcode to edit winlogon.exe ACL
across
Across the Great Wall we can reach every corner in the world
Advanced-Process-Injection-Workshop
al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
AllTools
All reasonably stable tools
ALPC-Example
An example of a client and server using Windows' ALPC functions to send and receive data.
AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
CVE-2019-0623-32-exp
win32k
Anti-ghosts's Repositories
Anti-ghosts/ACL-nuller
Assembly to NULL ACL on Windows 8.1 x64
Anti-ghosts/CVE-2015-0057
翻译文章,CVE-2015-0057漏洞在32位和64位系统上的利用。Exploiting the win32k!xxxEnableWndSBArrows use-after-free (CVE 2015-0057) bug on both 32-bit and 64-bit(Aaron Adams of NCC )
Anti-ghosts/getsystem-offline
Small tool to get a SYSTEM shell
Anti-ghosts/KernelReadWriteMemory
Simple code to manipulate the memory of a usermode process from kernel.
Anti-ghosts/ProcessHider
Post-exploitation tool for hiding processes from monitoring applications
Anti-ghosts/slides
Anti-ghosts/Token-Stealing-Shellcode
Anti-ghosts/windows
windows泄露源码
Anti-ghosts/windows_kernel_security_and_driver_development
《winsows内核安全与驱动开发》,谭文,陈铭霖等著。配套光盘example。现在还配光盘实在是浪费啊...