peta909 Goto Github PK

pinjectra

Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)

playarea

Play area to test out ideas

poet

Post-exploitation tool

pointers_references

polymorphic

This is sample source code of Polymorphic-family computer viruses.

portable-executable-pe-format-poster

A Portable Executable (PE) Format poster in A1 59,4 x 84,1 cm format, including almost all of the structures from PE/PE32+ format (with comments from WinNT.h header file).

powerloaderex

PowerLoaderEx - Advanced Code Injection Technique for x32 / x64

prezos

Collection of Slides from presentations open to public

process-dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

process-hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

process_chameleon

A process overwriting its own PEB to make an illusion that it has been loaded from a different path.

processing_listing_createtoolhelp32snapshot

ptview

Browse Page Tables on Windows

publications

Conference slides and White-papers

pygore

pyGoRE - Python library for analyzing Go binaries

pyserpent

serpent encryption in python

python-vb

analysis of visual basic code

ransomware_raasnet

Ransomware As A Service (By @TheRealZeznzo)

ratdecoders

Python Decoders for Common Remote Access Trojans

rc4

Implementation of the stream cipher - RC4 (Rivest Cipher 4) using both Python 2.x and 3.x

redsea

Music downloader for Tidal, revived

resonance

A C polymorphic and metamorphic engine

revengerat-stub-cssharp

Revenge-RAT C# Stub - Fixed

rootkit.com

Mirror of users section of rootkit.com

rootkits-list-download

This is the list of all rootkits found so far on github and other sites.

rpcview

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

rvmi

rVMI - A New Paradigm For Full System Analysis

sandboxie

Open Source Sandboxie

saviorburst

SAVIORBURST

scyllahide

Advanced usermode anti-anti-debugger