cr3m Goto Github PK

cve-2018-8174_analysis

Analysis of VBS exploit CVE-2018-8174

cve-2019-1458_poc

POC for cve-2019-1458

danger-zone

Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.

dbi

Files for http://deniable.org/reversing/binary-instrumentation

dbi-tools

deobshell

Powershell script deobfuscation using AST in Python

dllloaderunpacker

dotnet_windbg

driverbuddy

DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.

dumpext

WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both 32 (PE) and 64-bit (PE+) platforms.

ebpf_processor

An IDA processor for eBPF bytecode

effective-and-light-weight-deobfuscation-and-semantic-aware-attack-detection-for-powershell-scripts

eml_parser

python eml parser module

fakedns

A regular-expression based python MITM DNS server with support for DNS Rebinding attacks

finspyvm

Static unpacker for FinSpy VM

flare-bytecode_graph

forensia

Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.

frida-extract

Frida.re based RunPE (and MapViewOfSection) extraction tool

game-hacking

Tutorials, tools, and more as related to reverse engineering video games.

gef

Multi-Architecture GDB Enhanced Features for Exploit Devs & Reversers

gftrace

A command line Windows API tracing tool for Golang binaries.

gopro-research

For public GoPro HERO[*] information

hacking-with-go

Golang for Security Professionals

hacksysextremevulnerabledriver

HackSys Extreme Vulnerable Windows Driver

hermes

SMTP honeypot built on top of the Salmon mail server

hexraysdeob

Hex-Rays microcode API plugin for breaking an obfuscating compiler

hexrayspytools

hidden

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

historicprocesstree

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

holicpoc

POC and exploitation of vulnerabilities