Pinned Repositories
Blackbone
Windows memory hacking library
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
penetration
this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try
PolyHook
x86/x64 C++ Hooking Library
python-1
rsa-gmp
Implements the RSA algorithm in C using the gmp multi-precision library
runninglinuxkernel_4.0
《奔跑吧Linux内核》配套实验平台和代码，白色入门酱香篇，蓝色进阶浓香篇
ScyllaHide
Fork of ScyllaHide: https://bitbucket.org/NtQuery/scyllahide, Releases:
UeDePak
本源码用于获取UE使用AES加密时的key -- 仅支持x64位游戏，仅测试了少量4.21版本编译的游戏
mebuis's Repositories
mebuis/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
mebuis/python-1
mebuis/About-Attack
一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】
mebuis/APT-Hunter
APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity
mebuis/car
Cyber Analytics Repository
mebuis/CodeQLpy
CodeQLpy是一款基于CodeQL实现的半自动化代码审计工具，目前仅支持java语言。实现从源码反编译，数据库生成，脆弱性发现的全过程，可以辅助代码审计人员快速定位源码可能存在的漏洞。
mebuis/commandline_cloaking
A collection of projects demonstrating various commandline cloaking techniques on Linux
mebuis/Digital-Forensics-Guide
Digital Forensics Guide
mebuis/ebpf-slide
Collection of Linux eBPF slides/documents.
mebuis/EDRs
mebuis/EDRSandblast
mebuis/i686-elf-tools
i386-, i686- and x86_64-elf GCC, GDB and Binutils
mebuis/kestrel-lang
Kestrel threat hunting language: building reusable, composable, and shareable huntflows across different data sources and threat intel.
mebuis/krb5
mirror of MIT krb5 repository
mebuis/Ladon
大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0
mebuis/LEAF
Linux Evidence Acquisition Framework
mebuis/linux-rootkits
A collection of Linux kernel rootkits found across the internet taken and put together
mebuis/linux_kernel_hacking
Linux Kernel Hacking
mebuis/linux_kernel_wiki
linux内核学习资料：200+经典内核文章，100+内核论文，50+内核项目，500+内核面试题，80+内核视频
mebuis/linuxStack
Linux技术栈
mebuis/plthook
Hook function calls by replacing PLT(Procedure Linkage Table) entries.
mebuis/reveng_rtkit
Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.
mebuis/rootkit-arsenal-guacamole
An attempt to restore and adapt to modern Win10 version the 'Rootkit Arsenal' original code samples
mebuis/Rubeus
Trying to tame the three-headed dog.
mebuis/serenity
The Serenity Operating System 🐞
mebuis/sigma
Generic Signature Format for SIEM Systems
mebuis/SillyRAT
A Cross Platform multifunctional (Windows/Linux/Mac) RAT.
mebuis/splunk-app-examples
App examples for Splunk Enterprise
mebuis/Tools
GitHub repository for sysadmin related tools
mebuis/vscode-extension-splunk
Visual Studio Code Extension for Splunk