knightsc

Pinned Repositories

EnterDebugger
A kext to facilitate calling PE_enter_debugger on machines that don't respect Cmd-Ctrl-Opt-Shift-Esc
Language:C++14 7 12
gapstone
gapstone is a Go binding for the capstone disassembly library
Language:Go69 4 716
mockc2
An interactive mock C2 server
Language:Go0 1 00
osx_and_ios_kernel_programming
Updated sample code for OS X and iOS Kernel Programming book
Language:C++34 5 118
sb
A Go library for working with macOS SBPL files
Language:Go3 4 20
system_policy
osquery table extension that allows querying of information from the macOS private SystemPolicy.framework
Language:Objective-C30 3 14
USBApp
A small test app that tries to load a USBDriverKit system extension
Language:C++83 8 532
XProtect
macOS XProtect definition files
Language:YARA38 11 16

knightsc's Repositories

knightsc/USBApp
A small test app that tries to load a USBDriverKit system extension
Language:C++83 8 532
knightsc/gapstone
gapstone is a Go binding for the capstone disassembly library
Language:Go69 4 716
knightsc/XProtect
macOS XProtect definition files
Language:YARA38 11 16
knightsc/osx_and_ios_kernel_programming
Updated sample code for OS X and iOS Kernel Programming book
Language:C++34 5 118
knightsc/system_policy
osquery table extension that allows querying of information from the macOS private SystemPolicy.framework
Language:Objective-C30 3 14
knightsc/hopper
A collection of Hopper plugins and scripts
Language:Objective-C21 4 03
knightsc/EndpointSecurity
A module to expose the Endpoint Security library to Swift
Language:C20 3 02
knightsc/Tracer
macOS application that makes use of the EndpointSecurity framework
Language:Swift18 3 11
knightsc/darwin-xnu
The Darwin Kernel (mirror)
Language:C14 5 03
knightsc/CVE
A collection of CVE POC code
Language:Objective-C11 2 02
knightsc/CoreAnimationPlayground
A Swift playground demonstrating how to use Core Animation
Language:Swift9 3 02
knightsc/lldb
A collection of lldb scripts and configuration files
Language:Python7 3 01
knightsc/knightsc.github.io
Content for https://knight.sc
Language:Ruby6 4 02
knightsc/Presentations
Slides from various presentations and conferences
6 5 02
knightsc/sandbox_profiles
A collection of sandbox files from macOS 10.9 through 10.15
Language:Scheme6 3 01
knightsc/r2
A collection of radare2 scripts and configuration files
Language:Python4 3 0
knightsc/sb
A Go library for working with macOS SBPL files
Language:Go3 4 20
knightsc/mockc2
An interactive mock C2 server
Language:Go0 1 00
knightsc/aws-apigateway-lambda-authorizer-blueprints
Blueprints and examples for Lambda-based custom Authorizers for use in API Gateway.
Language:C#2 0
knightsc/binee
Binee: binary emulation environment
Language:Go0 0
knightsc/capstone
Capstone disassembly/disassembler framework: Core (Arm, Arm64, EVM, M68K, M680X, MOS65xx, Mips, PPC, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.
Language:C2 0
knightsc/homebrew-core
🍻 Default formulae for the missing package manager for macOS
Language:Ruby2 0
knightsc/micromdm
Mobile Device Management server
Language:Go2 0
knightsc/PasteHunter
Scanning pastebin with yara rules
Language:Python1 0
knightsc/ScatterBee_Analysis
Scripts to aid analysis of files obfuscated with ScatterBee.
Language:Python1 0
knightsc/scep
Go SCEP server
Language:Go2 0
knightsc/tau-tools
A repo containing tools developed by Carbon Black's Threat Research Team: Threat Analysis Unit
Language:PowerShell1 0
knightsc/visualboyadvance-m
Our goal is to improve upon VisualBoyAdvance by integrating the best features from the various builds floating around. In order to uncompress the downloaded package, you need a zip extractor.
Language:C++2 0
knightsc/xv6-riscv
Xv6 for RISC-V
Language:C0 0
knightsc/yara
The pattern matching swiss knife
Language:C2 0