kennyzeng Goto Github PK

shellcodeloader

shellcodeloader

signed-loaders

signed-loaders documents Windows executables that can be used for side-loading DLLs.

sinmapper

usermode driver mapper that forcefully loads any signed kernel driver (legit cert) with a big enough section (example: .data, .rdata) to map your driver over. the main focus of this project is to prevent modern anti-cheats (BattlEye, EAC) from finding your driver and having the power to hook anything due to being inside of legit memory (signed legit driver).

spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

steamless

Steamless is a DRM remover of the SteamStub variants. The goal of Steamless is to make a single solution for unpacking all Steam DRM-packed files. Steamless aims to support as many games as possible.

structs2-exp

S2-016、S2-017

stryker

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

sundaysearchsigncode

基于sunday算法的内存快速搜索，搜索2GB内存只需1秒

syscallhook

System call hook for Windows 10 20H1

sysmon

Sysmon shenanigans

sysmonx

SysmonX - An Augmented Drop-In Replacement of Sysmon

tdl

Driver loader for bypassing Windows x64 Driver Signature Enforcement

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

timestampresponder-csharp

A TimeStamp Responder written in C#, which supports both Authenticode and RFC3161

titanhide

Hiding kernel-driver for x86/x64.

twitter2skype

抓取Tweet並自動貼到Skype的Channel

universal-imgui-d3d11-hook

Universal Directx11 D3D11 Hook Project for all directx11 - 10 applications with ImGui and InputHook included, fullscreen supported.

vboxhardenedloader

VirtualBox VM detection mitigation loader

viviennevmm

VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.

vmpdump

A dynamic VMP dumper and import fixer, powered by VTIL.

vmread

vmwarehardenedloader

Vmware Hardened VM detection mitigation loader (anti anti-vm)

webshell-aihunter

机器学习NB算法实现基于文本的WebShell检测工具

wfpfirewall

基于WFP(Windows Filter Platform)的个人防火墙系统

win64driverstudy_src

WIN64驱动编程基础教程-源码 作者：胡文亮

windowsinternals

Windows Internals Book 7th edition Tools

winipt

The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.

wmi-static-spoofer

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking

wooyun

Wooyun簡易砍站-PyScript

wskhttp

Windows kernel drivers simple HTTP library for modern C++