Starred repositories
KittyLoader is a highly evasive loader written in C / Assembly
Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com
A simple, lightweight PowerShell script to remove pre-installed apps, disable telemetry, as well as perform various other changes to customize, declutter and improve your Windows experience. Win11Dβ¦
Open source library that implements translator and tools for REIL (Reverse Engineering Intermediate Language)
tailscaleβs selfhosted derp-server docker image
A memory-based evasion technique which makes shellcode invisible from process start to end.
A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
A collection of all android.jar files for the different platform versions.
A snapshotting, coverage-guided fuzzer for software (UEFI, Kernel, firmware, BIOS) built on SIMICS
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVβ¦
A PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.
β‘ A subdomain enumeration tool leveraging diverse techniques, designed for advanced pentesting operations
An LLVM IR dataset for data-driven compiler optimization research
Secure ELF parsing/loading library for forensics reconstruction of malware, and robust reverse engineering tools
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
A curated list of awesome projects related to eBPF.
A research project to add some brrrrrr to Burp
Linux virtual machines, with a focus on running containers