cr-0w

cr-0w's Stars

• sashs/Ropper

  Display information about files in different file formats and find gadgets to build rop chains for different architectures (x86/x86_64, ARM/ARM64, MIPS, PowerPC, SPARC64). For disassembly ropper uses the awesome Capstone Framework.

  Language:Python1.9k207

• zodiacon/windowskernelprogrammingbook

  The Windows Kernel Programming book samples

  Language:C++613125

• mertdas/SharpTerminator

  Terminate AV/EDR Processes using kernel driver

  Language:C#34165

• ZeroMemoryEx/Terminator

  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

  Language:C++935155

• ayoubfaouzi/al-khaser

  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

  Language:C++6k1.2k

• namazso/MagicSigner

  Signtool for expired certificates

  Language:C++46151

• mandiant/flare-floss

  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

  Language:Python3.4k456

• CBHue/PyFuscation

  Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

  Language:Python512106

• klezVirus/chameleon

  PowerShell Script Obfuscator

  Language:Python50486

• Crypt0s/Ekko_CFG_Bypass

  A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process

  Language:C8815

• davepl/blackjack

  Examples of using unique_ptr and vector

  Language:C++4311

• R3x/How2Kernel

  This Repository aims at giving a basic idea about Kernel Exploitation.

  Language:C50356

• x0reaxeax/PageSplit

  Splitting and executing shellcode across multiple pages

  Language:C9914

• eversinc33/Banshee

  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.

  Language:C++50473

• Cracked5pider/Stardust

  A modern 64-bit position independent implant template

  Language:C1.1k171

• Cracked5pider/CodeCave

  A bunch of scripts and code i wrote.

  Language:C13326

• WerWolv/ImHex

  🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

  Language:C++45.6k2k

• hasherezade/pe-bear

  Portable Executable reversing tool with a friendly GUI

  Language:C++2.8k174

• frank2/packer-tutorial

  A tutorial on how to write a packer for Windows!

  Language:C24825

• NUL0x4C/HellShell

  transform your payload into ipv4/ipv6/mac arrays

  Language:C15526

• memN0ps/venom-rs

  Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)

  Language:Rust32641

• kyleavery/AceLdr

  Cobalt Strike UDRL for memory scanner evasion.

  Language:C891160

• BishopFox/sliver

  Adversary Emulation Framework

  Language:Go8.7k1.2k

• JLospinoso/gargoyle

  A memory scanning evasion technique

  Language:C++845113

• joe-desimone/patriot

  Language:C++13128

• WithSecureLabs/TickTock

  Language:C++10716

• winsiderss/systeminformer

  A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

  Language:C11.2k1.4k

• VirtualAlllocEx/Direct-Syscalls-vs-Indirect-Syscalls

  The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

  Language:C16622

• wavestone-cdt/EDRSandblast

  Language:C1.6k283

• zodiacon/EtwExplorer

  View ETW Provider manifest

  Language:C#44472