Pinned Repositories
Atom_bombing
Commented version of Atom_bombing injection technique. Original source code from https://blog.ensilo.com/atombombing-brand-new-code-injection-for-windows
Carberp
Carberp Banking Trojan
CreateProcess
A simple C++ app to demo the use of CreateProcess() ,WaitForSingleObject() and use of handles.
DanSpecial
Weaponizing Gigabyte driver for priv escalation and bypass PPL
DrvMon
Advanced driver monitoring utility.
FileTest
Source code for File Test - Interactive File System Test Tool
malware-source-nanomites
NtCreateUserProcess_
peta909's Repositories
peta909/CreateProcess
A simple C++ app to demo the use of CreateProcess() ,WaitForSingleObject() and use of handles.
peta909/FileTest
Source code for File Test - Interactive File System Test Tool
peta909/analysis.oreans
🔎 Analysis of Oreans: Looking inside Themida, WinLicense, and CodeVirtualizer
peta909/APT32_Deobfuscate
My scripts to deobfuscate APT32 malware
peta909/challenges-2020
peta909/CobaltStrike
CobaltStrike's source code
peta909/COM_Mapper
A tool to create COM class/interface relationships in neo4j
peta909/cpuid
CPU feature identification for Go
peta909/CTF-All-In-One
CTF竞赛入门指南
peta909/ExploitCapcom
This is a standalone exploit for a vulnerable feature in Capcom.sys
peta909/flare-on-2020
FireEye 7th Flare-On challenge (2020)
peta909/Flare-On-Challenges
This repo is aim to compile all Flare-On challenge's binaries. Update: 2014 -2020.
peta909/freepascal
Free Pascal Compiler - an open source Object Pascal compiler. This is an unofficial mirror of the FPC SubVersion repository and is for convenience use only. It is synced every 15 minutes. For submitting patches or bug reports, go to http://bugs.freepascal.org
peta909/gld
Go shellcode LoaDer
peta909/GoProcessInject0r
Proof of concept for single/multiple shellcode process injection malware in Go language.
peta909/GpuRamDrive
RamDrive that is backed by GPU Memory
peta909/idacode
An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.
peta909/KasperskyHook
Hook system calls on Windows by using Kaspersky's hypervisor
peta909/linux-rootkits
A collection of Linux kernel rootkits found across the internet taken and put together
peta909/Mapping-Injection
Just another Windows Process Injection
peta909/MIRACL
MIRACL Cryptographic SDK: Multiprecision Integer and Rational Arithmetic Cryptographic Library is a C software library that is widely regarded by developers as the gold standard open source SDK for elliptic curve cryptography (ECC).
peta909/NoVmp
A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
peta909/PEzor
Read the blog post here: https://iwantmore.pizza/posts/PEzor.html
peta909/process_chameleon
A process overwriting its own PEB to make an illusion that it has been loaded from a different path.
peta909/ShellCodeEmulator
Shellcode emulator written with Unicorn
peta909/tiny-AES-c
Small portable AES128/192/256 in C
peta909/unipacker
Automatic and platform-independent unpacker for Windows binaries based on emulation
peta909/vmpdump
A dynamic VMP dumper and import fixer, powered by VTIL.
peta909/win32api-practice
Offensive tools written for practice purposes
peta909/x86-Code-Virtualizer
x86 Binary Code Virtualization Tool