Pinned Repositories
AheadLib-x86-x64
hijack dll Source Code Generator. support x86/x64
al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Anti-AntiDebuggerDriver
VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
antispy
AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
Apex_Legends_Driver_Cheat
bianchengyulu
个人总结的经验语录
capstone
Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
chfsgui
This is just a GUI WRAPPER for chfs(cute http file server)
CodeMake
esig文件生成工具
CVE-2019-0708-EXP-Windows
CVE-2019-0708-EXP-Windows版单文件exe版,运行后直接在当前控制台反弹System权限Shell
dosnow's Repositories
dosnow/al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
dosnow/Anti-AntiDebuggerDriver
VMP 3.5 - VMP 3.7.2 Full Protect Anti Debugger Fuxker
dosnow/Direct-NtCreateUserProcess
Call NtCreateUserProcess directly as normal.
dosnow/Divert
WinDivert: Windows Packet Divert
dosnow/dll_to_exe
Converts a DLL into EXE
dosnow/E-Decompiler
用来辅助分析易语言程序的IDA插件
dosnow/eLibStl
🎃易语言核心库拓展
dosnow/HP-Socket
High Performance TCP/UDP/HTTP Communication Component
dosnow/HyperDbg
The Source Code of HyperDbg Debugger 🐞
dosnow/HyperHide
Hypervisor based anti anti debug plugin for x64dbg
dosnow/kdmapper
KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory
dosnow/LibKrnln
🎃跨平台中文命令库
dosnow/MemoryDll-DllRedirect
Dll memory redirection through Hook NtMapViewOfSection
dosnow/minhook
The Minimalistic x86/x64 API Hooking Library for Windows
dosnow/NtSocket_NtClient_NtServer
Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
dosnow/od_plugin
这是一个Ollydbg插件，它提供了非常多友好的功能包括但不限于方便的数据提取，一键trace，跟踪api，iat修复等等
dosnow/ParsePb
无proto文件解析protobuf序列化后的内容
dosnow/protobuf-PbParser
PbParser是一个VisualStudio2022项目,用于解析和打包protobuf的二进制数据,它允许在没有proto文件的情况下,准确的解析和打包数据
dosnow/qJson
C++实现的超简便Json解析库
dosnow/QQImpl
调用QQ Mojo IPC与WeChatOCR
dosnow/ScyllaHide
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
dosnow/simple_debug_plugin
一个辅助调试器的工具，可以让调试器附加、读写被保护的进程如杀软（玩具项目，仅为巩固知识编写）
dosnow/TextCmp
Compare the .text code in memory with the original one of File
dosnow/unicorn
Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
dosnow/vmp3-import-fix
Fix VMProtect3 IAT
dosnow/VmpHelper
an ida plugin used to decompile vmp
dosnow/vmprotect-3.5.1
dosnow/WeChatStudy
StudyWechat
dosnow/WPeChatGPT
A plugin for IDA that can help to analyze binary file and it uses OpenAI's ChatGPT training API.
dosnow/Xprocess