yangfan6888 Goto Github PK

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

memit

Run binaries straight from memory in Linux :no_entry_sign::floppy_disk:

memorymodule

Library to load a DLL from memory.

memorymodule-1

A tool to parse and load module in memory, as well as attach a DLL in EXE. Most of the functions are inline, so that it can also be used in shellcode.

memoryranger

MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. MemoryRanger has been presented at the BlackHat, HITB, CDFSL.

memscan-1.0

Scan and edit memory using WinAPI functions such as ReadProcessMemory and WriteProcessMemory

micro8

microsoft-pdb

Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.

mimikatzx64_base64

mint

Contains the definitions for the Windows Internal UserMode API from ntdll.dll, samlib.dll and winsta.dll.

miscellaneous

Small programs and scripts that do not require their own repositories

mmloader

A library for loading dll module bypassing windows PE loader from memory (x86/x64)

mongoose

Mongoose Embedded Web Server Library - Mongoose is more than an embedded webserver. It is a multi-protocol embedded networking library with functions including TCP, HTTP client and server, WebSocket client and server, MQTT client and broker and much more.

msbuild-inline-task

msbuildapicaller

MSBuild Without MSBuild.exe

mstscdump

MSTSC Packet Dump Utility

mtseckill

京东茅台抢购

myloadlibrary

自己实现LoadLibrary函数的操作

n_m3u8dl-cli

[.NET] m3u8 downloader 开源的命令行m3u8/HLS/dash下载器，支持普通AES-128-CBC解密，多线程，自定义请求头等. 支持简体中文,繁体中文和英文. English Supported.

nim_pc_demo

云信Windows(PC) C/C++ Demo源码仓库

nintendo-hireme

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

nopowershell

nopowershell

npcap

Nmap Project's Windows packet capture and transmission library

ntdllunpatcher

Example code for EDR bypassing

nttools

Some random system tools for Windows

obfdetect

IDA plugin to pinpoint obfuscated code

obfuscator

ollydbg-address-shortcuts

This plugin adds highly needed shortcuts to OllyDbg including Follow DWORD in Disassembler (Ctrl+Enter), Follow DWORD in Dump (Alt+Enter), and Copy RVA (Alt+"+").

ollydbg1plugins