peta909

Malware Researcher, always hoping to learn more and share knowledge with others.

Singapore

Pinned Repositories

Atom_bombing
Commented version of Atom_bombing injection technique. Original source code from https://blog.ensilo.com/atombombing-brand-new-code-injection-for-windows
Language:C++2 1 02
Carberp
Carberp Banking Trojan
Language:C++1 0 00
CreateProcess
A simple C++ app to demo the use of CreateProcess() ,WaitForSingleObject() and use of handles.
Language:C++3 1 00
DanSpecial
Weaponizing Gigabyte driver for priv escalation and bypass PPL
Language:C1 1 00
DrvMon
Advanced driver monitoring utility.
Language:C1 0 00
FileTest
Source code for File Test - Interactive File System Test Tool
Language:C++1 1 00
malware-source-nanomites
Language:Assembly1 1 00
NtCreateUserProcess_
Language:C12 3 24

peta909's Repositories

peta909/DanSpecial
Weaponizing Gigabyte driver for priv escalation and bypass PPL
Language:C1 1 00
peta909/VirtualDeobfuscator-1
Reverse engineering tool for virtualization wrappers
Language:Python10
peta909/ABD
Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
Language:Jupyter Notebook1 0
peta909/aplib
Module for decompressing aPLib compressed data
Language:Python1 0
peta909/balbuzard
Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
Language:YARA0 0
peta909/chacha20
Pure Python 2 and Python 3 implementations of the ChaCha20 stream cipher
Language:Python1 0
peta909/cpu-internals
Intel / AMD CPU Internals
Language:C0 0
peta909/ctf-writeups
CTF writeups
Language:Assembly1 0
peta909/drakvuf-sandbox
DRAKVUF Sandbox - automated hypervisor-level malware analysis system
Language:JavaScript0 0
peta909/Dumpert
LSASS memory dumper using direct system calls and API unhooking.
Language:C
peta909/ebooks
1 0
peta909/fuckVmp3
fuck like title.
Language:Python1 0
peta909/HyperBone
Minimalistic VT-x hypervisor with hooks
Language:C1 0
peta909/hypervisor
lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
peta909/IDAGolangHelper
Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary
Language:Python1 0
peta909/idapython-cheatsheet
Scripts and cheatsheets for IDAPython
Language:Python1 0
peta909/InfinityHook
Hook system calls, context switches, page faults and more.
Language:C++1 0
peta909/kHypervisor
kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
peta909/Malware-Analysis-Training
Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.
peta909/MemoryModule
Library to load a DLL from memory.
Language:C1 0
peta909/MyHyperVisor
Language:C2 01
peta909/pcode2code
a vba pcode decompiler based on pcodedmp
peta909/pinjectra
Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
Language:C++1 0
peta909/Ransomware_RAASNet
Ransomware As A Service (By @TheRealZeznzo)
peta909/RedSea
Music downloader for Tidal, revived
peta909/RevengeRAT-Stub-CSsharp
Revenge-RAT C# Stub - Fixed
Language:C#1 0
peta909/Sandboxie
Open Source Sandboxie
Language:C1 0
peta909/ScyllaHide
Advanced usermode anti-anti-debugger
Language:C++1 0
peta909/sdk-api
Public contributions for win32 API documentation
1 0
peta909/SimpleVisor
SimpleVisor is a simple, portable, Intel VT-x hypervisor with two specific goals: using the least amount of assembly code (10 lines), and having the smallest amount of VMX-related code to support dynamic hyperjacking and unhyperjacking (that is, virtualizing the host state from within the host). It works on Windows and UEFI.
Language:C1 0