453483289 Goto Github PK

hanzoinjection

injecting arbitrary codes in memory to bypass common antivirus solutions

hardentools

Hardentools is an utility that disables a number of risky Windows features.

hardwarecode

基于xposed 修改硬件信息

hashcat

Advanced CPU-based password recovery utility

hashdata

A command line Hash Identifying tool.

haxm

Intel's Hardware Accelerated Execution Manager (ripped) SDK

heldroid

HelDroid: Dissect Android Apps Looking for Ransomware Functionalities

hexrayscodexplorer

Hex-Rays Decompiler plugin for better code navigation

hexraysdeob

Hex-Rays microcode API plugin for breaking an obfuscating compiler

hexrayspytools

Ida Pro plugin

hfdb.io

hibr2bin

Comae Hibernation File Decompressor

hidden

Windows driver and usermode interface which can hide objects of file-system and registry, protect processes and etc

hide-process-by-kd.exe

powershell to hide process by kd.exe

hideandroidemulator

Slides and demo resources presented at HITCON 2014 & XCON 2014-"Guess Where I am-Android模拟器躲避的检测与应对"

hijack_ams_broadintent

hollowfind

Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and also reports any suspicious memory regions which should help in detecting any injected code.

hookexplorer

technical tool to analyze a process trying to find various types of runtime hooks. Interface and output is geared torwards security experts. Average users wont be able to decipher its output.

hookpmssignature

Android中Hook 应用签名方法

hooktools

Plugin for Process Hacker 2 ( https://github.com/processhacker2 ), displays system hooks and able to unhook too.

horsepill

HORSEPILL rootkit PoC

how2exploit_binary

An in depth tutorial on how to do binary exploitation

how2heap

A repository for learning various heap exploitation techniques.

howtoboostpatchguard

more at http://www.zer0mem.sk/?p=271

hrdev

Hex-Rays Decompiler Enhanced View

hunter

(l)user hunter using WinAPI calls only

hyperbone

Minimalistic VT-x hypervisor with hooks

hyperdbg

Automatically exported from code.google.com/p/hyperdbg

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

hyperplatform_log_parser

User-mode program parsing logs created by HyperPlatform