joyboy8848 Goto Github PK

followers: 0.0 following: 3.0 repos: 36.0 gists: 0.0

Name: Grace King

Type: User

Bio: I plan to use GitHub for version control, collaboration, and storing my code repositories. #GitHub

Grace King's Projects

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

cave-finder

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

d1rkldr

Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

eventlogpersist

A Simple Proof Code for Extracting and Executing Shellcode from Event Logs

eventshellcode

对卡巴斯基发现的一个将shellcode写入Eventlog的利用方式的复现和加强

evilqr

Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.

fanbox

Some anti-sandbox codes, copy directly to strengthen your own ShellCode

gowxdump

SharpWxDump的Go语言版。微信客户端取证，获取信息(微信号、手机号、昵称)，微信聊天记录分析(Top N聊天的人、统计聊天最频繁的好友排行、关键词列表搜索等)

imonitorsdk

系统监控开发套件（sysmon、procmon、edr、终端安全、主机安全、零信任、上网行为管理、沙箱）

lazy-importer

minimal msvc-windows exclusive lazy importer for C++

This GitHub repository provides code examples and implementation principles for various Shellcode Loader techniques, helping learners gain insight into malicious software development and Trojan evasion tactics.