a10ncoder Goto Github PK

0x00sec

Repository for code and snippets posted on 0x00sec.org

0x00sec_code

Code for my 0x00sec.org posts

24h2-nt-exploit

Exploit targeting NT kernel in 24H2 Windows Insider Preview

aceldr

Cobalt Strike UDRL for memory scanner evasion.

advanced-cpp-programming-cookbook

Advanced C++ Programming CookBook, published by Packt

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

alltools

All reasonably stable tools

apcinject

ark-tools

Windows Ark 工具的工程和一些demo

arkitlib

Automatically exported from code.google.com/p/arkitlib

arkprotect

An Ark tool project，run on Win7 x86/x64

at-ps

Adversary Tactics - PowerShell Training

atom-bombing

Brand New Code Injection for Windows

atomic-red-team

Small and highly portable detection tests.

auth-flask-angular

autochk-rootkit

Reverse engineered source code of the autochk rootkit

awesome-injection

Centralized resource for listing and organizing known injection techniques and POCs

awesome-red-teaming

List of Awesome Red Teaming Resources

azazel

Azazel is a userland rootkit based off of the original LD_PRELOAD technique from Jynx rootkit. It is more robust and has additional features, and focuses heavily around anti-debugging and anti-detection.

bdarkit

just an lite AntiRootkit for interesting

bestedrofthemarket

Little AV/EDR bypassing lab for training & learning purposes

black-angel-rootkit

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

blackbone

Windows memory hacking library

bpf-hookdetect

Dectect syscall hooking using eBPF

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

callmewin32kdriver

Load your driver like win32k.sys

callmon

CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers

captain-hook

cfb

Canadian Furious Beaver is a tool for hijacking IRPs handler in Windows drivers, and facilitating the process of analyzing Windows drivers for vulnerabilities

charlotte

c++ fully undetected shellcode launcher ;)