cr-0w

cr-0w's Stars

• Kudaes/EPI

  Threadless Process Injection through entry point hijacking

  Language:Rust34032

• mytechnotalent/Reverse-Engineering

  A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

  Language:Assembly11.6k1k

• y11en/PEBFake

  PEBFake(修改PEB 伪装当前进程路径、参数等)

  Language:C++4925

• aaaddress1/masqueradeCmdline

  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.

  Language:C++3815

• 3intermute/arm64_silent_syscall_hook

  silent syscall hooking without modifying sys_call_table/handlers via patching exception handler

  Language:C12338

• ZeroMemoryEx/Blackout

  kill anti-malware protected processes ( BYOVD) ( Microsoft Won)

  Language:C++910135

• Captainarash/The_Holy_Book_of_X86

  A simple guide to x86 architecture, assembly, memory management, paging, segmentation, SMM, BIOS....

  947123

• X0RW3LL/WhatTheStack

  Helper script for identifying bad characters based on (Immunity|edb)'s stack dump

  Language:Python11

• bsauce/kernel-exploit-factory

  Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

  Language:C1.2k188

• am0nsec/SharpHellsGate

  C# Implementation of the Hell's Gate VX Technique

  Language:C#20853

• ReClassNET/ReClass.NET

  More than a ReClass port to the .NET platform.

  Language:C#1.9k374

• a0rtega/pafish

  Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

  Language:C3.5k467

• Kempeter/crow-rust

  The crow YouTube channel tutorials written in rust

  Language:Rust4

• mandiant/SSSDKCMExtractor

  Language:Python5326

• nop-tech/learning-resources

  Collection of resources to learn pentesting, exploit development, obfuscation & much more.

  9615

• nop-tech/OSED

  Containing my notes, practice binaries + solutions, blog posts, etc. for the Offensive Security Exploit Developer (OSED/EXP-301)

  588126

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python62.1k14.8k

• rad9800/TamperingSyscalls

  Language:C++46472

• outflanknl/Dumpert

  LSASS memory dumper using direct system calls and API unhooking.

  Language:C1.5k244

• lfontesm/PEB-Walk

  Language:C++12

• Crypto-Cat/CTF

  CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

  Language:Python1.7k368

• S3cur3Th1sSh1t/OffensiveVBA

  This repo covers some code execution and AV Evasion methods for Macros in Office documents

  Language:VBA1.2k223

• huntandhackett/process-cloning

  The Definitive Guide To Process Cloning on Windows

  Language:C44340

• x0reaxeax/SysCook64

  Indirect Syscall invocation via thread hijacking

  Language:C143

• thefLink/RecycledGate

  Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll

  Language:C44654

• klezVirus/NimlineWhispers3

  A tool for converting SysWhispers3 syscalls for use with Nim projects

  Language:Nim14117

• eversinc33/BouncyGate

  Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).

  Language:Nim18014

• S3cur3Th1sSh1t/NimGetSyscallStub

  Get fresh Syscalls from a fresh ntdll.dll copy

  Language:Nim22341

• xct/windows-kernel-exploits

  Some of my windows kernel exploits for learning purposes

  Language:C++11819

• Arinerron/heaptrace

  helps visualize heap operations for pwn and debugging

  Language:C31118