sparkyparrot Goto Github PK

abd

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

akt

Armadillo Key Tool

analysis.oreans

🔎 Analysis of Oreans: Looking inside Themida, WinLicense, and CodeVirtualizer

anticheat-testing-framework

Framework for testing any Anti-Cheat

armag3ddon

ArmaG3ddon by CondZero/ARTeam

awesome-windows-kernel-security-development

windows kernel security development

blackbone

Windows memory hacking library

byepg

Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI

defcon-25-workshop

Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

driverbuddy

DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.

flirtdb

A community driven collection of IDA FLIRT signature files

genaytyk-vm

My notes about Genyatyk VM crackme

guardmon

Hypervisor based tool for monitoring system register accesses.

hexrayscodexplorer

Hex-Rays Decompiler plugin for better code navigation

hvpp

hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

hyperplatform

Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.

hypervisor-from-scratch

Source code of a multiple series of tutorials about hypervisor. Available at: https://rayanfam.com/tutorials

icebox

Virtual Machine Introspection, Tracing & Debugging

idaskins

Advanced skinning plugin for IDA Pro

infinityhook

Hook system calls, context switches, page faults and more.

invoke-obfuscation

PowerShell Obfuscator

kaspy_toolz

kernel-bridge

Windows kernel hacking framework, driver template, hypervisor and API written on C++

keystone

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

lighthouse

Code Coverage Explorer for IDA Pro & Binary Ninja

lkd

Local Kernel Debugger (LKD) is a python wrapper around dbgengine.dll

lpeworkshop

Windows / Linux Local Privilege Escalation Workshop

memorymon

Detecting execution of kernel memory where is not backed by any image file

miasm

Reverse engineering framework in Python