online-9

online-9's Stars

• xoreaxeaxeax/movfuscator

  The single instruction C compiler

  Language:C9.4k20640396

• capstone-engine/capstone

  Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

  Language:C7.6k3001.3k1.6k

• LordNoteworthy/al-khaser

  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

  Language:C++5.9k2401011.2k

• trustedsec/ptf

  The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

  Language:Python5.1k3222431.2k

• dsasmblr/game-hacking

  Tutorials, tools, and more as related to reverse engineering video games.

  4.7k22413619

• ThunderCls/xAnalyzer

  xAnalyzer plugin for x64dbg

  Language:C1k4554112

• ldionne/dyno

  Runtime polymorphism done right

  Language:C++975584543

• stevemk14ebr/PolyHook

  x86/x64 C++ Hooking Library

  Language:C++8856120171

• richgel999/lzham_codec

  Lossless data compression codec with LZMA-like ratios but 1.5x-8x faster decompression speed, C/C++

  Language:C++695642171

• sam-b/windows_kernel_address_leaks

  Examples of leaking Kernel Mode information from User Mode on Windows

  Language:C++579331158

• vmcall/loadlibrayy

  x64 manualmapper with kernel elevation and thread hijacking capabilities

  Language:C#411350169

• xdavidhu/lanGhost

  👻 A LAN dropbox chatbot controllable via Telegram

  Language:Python354281760

• gellin/TeamViewer_Permissions_Hook_V1

  A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.

  Language:C++30827078

• 0blio/Caesar

  An HTTP based RAT (Remote Administration Tool) that allows you to remotely control devices from your browser

  Language:PHP2953319136

• r4stl1n/SSH-Brute-Forcer

  A Simple Multi-Threaded SSH Brute Forcer

  Language:Python2682526111

• waryas/EUPMAccess

  This DKOM exploit enables any app in usermode to access physical memory directly

  Language:C++21811354

• vlad902/hacking-team-windows-kernel-lpe

  Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.

  Language:C19717088

• BenjaminKim/dokanx

  user-mode filesystem framework for Windows

  Language:C++185433863

• kwilcz/Antario

  Clean base/cheat made for CS:GO.

  Language:C131196934

• vmcall/ElevateMe

  Handle access elevation via direct kernel object manipulation

  Language:C#11813459

• cbayet/PoolSprayer

  Simple library to spray the Windows Kernel Pool

  Language:C++1045032

• K2/ADMMutate

  Classic code from 1999+ I am fairly sure this is the first public polymorphic shellcode ever (best IMHO and others http://ids.cs.columbia.edu/sites/default/files/ccs07poly.pdf :) If I ever port this to 64 or implement a few other suggestions (sorry I lost ppc code version contributed) it will be orders of magnitude more difficult to spot, so I hope nobody uses signatures for anything (virus / malware scanners included).

  Language:C814118

• vic4key/Cat-Driver

  CatDriver - The Kernel Mode Driver that written in C++. It is an useful driver and has the highest privilege level on the Windows platform. It can be used for Game Hacking and others.

  Language:C++632030

• d366/DarkMMap

  Manual PE image mapper

  Language:C++605036

• NtRaiseHardError/Dreadnought

  PoC for detecting and dumping code injection (built and extended on UnRunPE)

  Language:C++542121

• muffins/rookit_playground

  Educational repository for learning about rootkits and Windows Kernel Hooks.

  Language:Assembly497026

• weixu8/RegistryMonitor

  Formely KMon, a Windows Kernel Driver designed to prevent malware attacks by monitoring the creation of registry keys in common autorun locations and prompting the user whether they want to allow the creation of the key. More of an experiment into Kernel level SSDT hooks but a fun project nonetheless

  Language:C214017

• csAlphyy/kiwibase

  Language:C++2

• etzih/ssde

  Small Scalable Disassembler Engine

  Language:C++2

• TheServer201/usde

  Ultra Small Disassembler Engine

  Language:C20