qynklee Goto Github PK

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

anti-debug-examples-windows

Some examples of anti debug techniques used in malware or commercial products preventing analysts to debug code of app.

anti-debugging

Anti-debugging techniques on a (bad looking) Win32 application.

anti-debugging-collections

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

antibynewsectionaddingmethod

Automated Integration of anti-Reversing methods in PE executables

antidbg

A bunch of Windows anti-debugging tricks for x86 and x64.

auto_ytrevanced

This script is automate retrieve apk from apk|mirror|kpa and get lastest revanced patches and run patching with Revanced-CLI to create YTRevanced

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

badbebras-stealer

Stealer written in Rust language

bias

Bluetooth Impersonation AttackS (BIAS) [CVE 2020-10135]

books

bt-linkkeysync

Scripts to synchronize bluetooth link keys from mac OSX to windows

c-sharp-memory-injection

A set of scripts that demonstrate how to perform memory injection in C#

carogamelanv2.2

This is previous version of CaroGameLAN in https://github.com/Qynklee/GameCaroLAN

cdpsvclpe

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

code-obfuscator

code obfuscation via control flow flattening

communication-python-cpp-udp-socket

These scripts described server/client UDP comunication for python and C++

crustycrab

Command and Control Framework used to teach purple team to FITSEC and to use in competitions

csharp_process_injection

cve-2021-40444

CVE-2021-40444 PoC

cve-2022-21882

cve-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

cve-2023-21752

cve-2023-36003-poc

Privilege escalation using the XAML diagnostics API (CVE-2023-36003)

defendercheck

Identifies the bytes that Microsoft Defender flags on.

delete-self-poc

A way to delete a locked file, or current running executable, on disk.

demotet

Unpacking and decryption tools for the Emotet malware

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dsync

IDAPython plugin that synchronizes disassembler and decompiler views

electroninjector

inject script into encrypted electron for some app