Pinned Repositories
Blackbone
Windows memory hacking library
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
penetration
this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try
PolyHook
x86/x64 C++ Hooking Library
python-1
rsa-gmp
Implements the RSA algorithm in C using the gmp multi-precision library
runninglinuxkernel_4.0
《奔跑吧Linux内核》配套实验平台和代码，白色入门酱香篇，蓝色进阶浓香篇
ScyllaHide
Fork of ScyllaHide: https://bitbucket.org/NtQuery/scyllahide, Releases:
UeDePak
本源码用于获取UE使用AES加密时的key -- 仅支持x64位游戏，仅测试了少量4.21版本编译的游戏
mebuis's Repositories
mebuis/Windows-driver-samples
This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.
mebuis/PowerShellRunBox
Dynamic PowerShell Analysis Framework Based Upon PowerShell Debugging Functionality
mebuis/ghidra
Ghidra is a software reverse engineering (SRE) framework
mebuis/SharpHide
Tool to create hidden registry keys.
mebuis/ShimCacheParser
mebuis/cpptest
cpptest
mebuis/Windows-classic-samples
This repo contains samples that demonstrate the API used in Windows classic desktop applications.
mebuis/Blackbone
Windows memory hacking library
mebuis/Detours
Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
mebuis/IDA_Pro_7.2
IDA_Pro_7.2
mebuis/AdvancedScript
Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder
mebuis/WeChatRobot
PC版微信机器人
mebuis/OpenArk
OpenArk is a open source anti-rookit(ARK) tool on Windows.
mebuis/InfinityHook
Hook system calls, context switches, page faults and more.
mebuis/UeDePak
本源码用于获取UE使用AES加密时的key -- 仅支持x64位游戏，仅测试了少量4.21版本编译的游戏
mebuis/ProcMonX
Extended Process Monitor-like tool based on Event Tracing for Windows
mebuis/nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
mebuis/DriverInjectDll
Using Driver Global Injection dll, it can hide DLL modules
mebuis/marvel
mebuis/KernelSymbolsHelper
Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using the symbol server.
mebuis/HideDriver
之前那份是7600的，每次编译搞得好麻烦。更新一个VS2017可以直接编译的。
mebuis/PPLKiller
Protected Processes Light Killer
mebuis/NewHideDriverEx
Hide Driver By MiProcessLoaderEntry
mebuis/shadowbroker
The Shadow Brokers "Lost In Translation" leak
mebuis/Virus-Analysis
记录一下自己的病毒分析成果
mebuis/test
mebuis/MemoryModule
Library to load a DLL from memory.
mebuis/splunk
splunk enterprise information disclosure
mebuis/Micro8
Gitbook
mebuis/unicorn_pe
Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.